VDB
SSA-572005
SSA-572005
PUBLISHED
CVSS 7.5 HIGH
Session fixation and multiple incorrect parameter parsing vulnerabilities that could potentially lead to remote code execution were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and recommends to update to the latest versions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SICAM P850 (7KG8501-0AA01-0AA0) | ||
| SICAM P850 (7KG8501-0AA02-2AA0) | ||
| SICAM P850 (7KG8501-0AA12-2AA0) | ||
| SICAM P850 (7KG8500-0AA30-2AA0) | ||
| SICAM P850 (7KG8501-0AA12-0AA0) | ||
| SICAM P850 (7KG8500-0AA30-0AA0) | ||
| SICAM P850 (7KG8501-0AA02-0AA0) | ||
| SICAM P855 (7KG8550-0AA00-0AA0) | ||
| SICAM P850 (7KG8500-0AA10-0AA0) | ||
| SICAM P855 (7KG8550-0AA00-2AA0) | ||
| SICAM P850 (7KG8501-0AA11-0AA0) | ||
| SICAM P850 (7KG8500-0AA00-0AA0) | ||
| SICAM P850 (7KG8500-0AA00-2AA0) | ||
| SICAM P850 (7KG8501-0AA32-2AA0) | ||
| SICAM P850 (7KG8501-0AA31-2AA0) | ||
| SICAM P850 (7KG8501-0AA11-2AA0) | ||
| SICAM P850 (7KG8501-0AA01-2AA0) | ||
| SICAM P850 (7KG8501-0AA32-0AA0) | ||
| SICAM P850 (7KG8500-0AA10-2AA0) | ||
| SICAM P850 (7KG8501-0AA31-0AA0) |
Exploit Intelligence
- https://cert-portal.siemens.com/productcert/html/ssa-572005.html (circl)
- https://cert-portal.siemens.com/productcert/csaf/ssa-572005.json (circl)
- https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf (circl)
- https://cert-portal.siemens.com/productcert/txt/ssa-572005.txt (circl)
- https://support.industry.siemens.com/cs/ww/en/view/109743594/ (circl)
- https://support.industry.siemens.com/cs/ww/en/view/109743621/ (circl)
Timeline
- CVE Published
References
- https://cert-portal.siemens.com/productcert/html/ssa-572005.html advisory
- https://cert-portal.siemens.com/productcert/csaf/ssa-572005.json advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf advisory
- https://cert-portal.siemens.com/productcert/txt/ssa-572005.txt advisory
- https://support.industry.siemens.com/cs/ww/en/view/109743594/ fix
- https://support.industry.siemens.com/cs/ww/en/view/109743621/ fix