SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Risk Summary

<p>Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely:</p> <ul> <li>SICAM A8000 Device firmware <ul> <li>CPCI85 for CP-8031/CP-8050</li> </ul></li> <li>SICAM EGS Device firmware <ul> <li>CPCI85</li> </ul></li> <li>SICAM 8 Software Solution <ul> <li>SICORE</li> </ul></li> </ul> <p>Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)