Siemens SICAM A8000 Web Server Module Authentication Bypass Vulnerability

The SICAM A8000 RTU (Remote Terminal Unit) series is a modular device family for remote control and automation applications in all energy supply areas.An authentication bypass vulnerability exists in the Siemens SICAM A8000 Web Server Module, which is caused by the component allowing the activation of the web server module, which provides which provides unauthenticated access to its web pages. An attacker could exploit this vulnerability to retrieve debug-level information from the component (e.g. internal network topology or connected systems).