Siemens SICAM P850 and SICAM P855

🗓️ 10 May 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 67 Views

Siemens SICAM P850 and SICAM P855 affected by multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2022-29877	20 May 202213:15	–	attackerkb
BDU FSTEC	The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional diagnostic devices lies in the improper checking of POST request parameters. This allows a perpetrator to cause malfunctions during maintenance or execute arbitrary codes.	1 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices, which stems from the transmission of data in an open manner via the HTTP protocol, allows attackers to intercept traffic and disrupt the operation of the devices.	1 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices arises from incorrect validation of certain GET and POST requests. This allows a perpetrator to trigger a service failure or execute arbitrary code.	1 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices lies in the insufficient cleaning of user data in the GET request parameter, allowing attackers to perform cross-site scripting attacks.	3 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional measuring devices lies in the lack of authentication for critical functions. This allows attackers to disclose internal configuration details of the web interface or alter network settings.	29 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-29873	20 May 202216:30	–	circl
Circl	CVE-2022-29874	20 May 202216:30	–	circl
Circl	CVE-2022-29877	20 May 202216:34	–	circl
CNNVD	Siemens SICAM 访问控制错误漏洞	12 May 202200:00	–	cnnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-165073.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-165073.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-07.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-132-07
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

10 May 2022 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 27.5

CVSS 3.19.8

CVSS 49.3

EPSS0.03324

siemens sicam p850 siemens sicam p855 vulnerabilities remote exploitation cross-site scripting authentication bypass denial-of-service