Siemens SICAM MIC Authentication Bypass Vulnerability

CVSS 9.3 CRITICAL

CVEs (1)

CVE-2015-5386

Siemens provides firmware update V2404, which fixes the vulnerability and contains further security improvements
Siemens recommends that customers update to the latest firmware version
The firmware update for SICAM MIC can be found at the following location on the Siemens website: (http://w3.siemens.com/smartgrid/global/en/products-systems-solutions/substation-automation/remote-terminal-units/Pages/SICAM-MIC.aspx)
For more information on this vulnerability and more detailed mitigation instructions, please see Siemens Security Advisory SSA-632547 at the following location: (http://www.siemens.com/cert/advisories)

Siemens

Siemens · SICAM MIC <V2404.

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.