Siemens SICAM PAS Information Disclosure Vulnerability (CNVD-2016-04434)

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. An information disclosure vulnerability exists in Siemens SICAM PAS. An authenticated, local attack...

Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-182-02A Siemens SICAM PAS Vulnerabilities that was published November 29, 2016, on the NCCIC/ICS-CERT web site. Positive Technologies’ Ilya Karpov and Dmitry Sklyarov have identified two vulnerabilities in the...

Siemens SICAM PAS Information Disclosure Vulnerabilities (Update B)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-182-02A Siemens SICAM PAS Vulnerabilities that was published November 29, 2016, on the NCCIC/ICS-CERT web site. Positive Technologies’ Ilya Karpov and Dmitry Sklyarov have identified two vulnerabilities in the...

PT-2016-33: Privilege Gaining in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Privilege Gaining vulnerability in Siemens SICAM PAS. SICAM PAS has a factory account with hardcoded passwords, which allows attackers to gain privileged access to the database via TCP port 2638. How to fix Update your software up to...

PT-2016-28: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database...

PT-2016-34: Password Recovery in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Password Recovery vulnerability in Siemens SICAM PAS. Vulnerability in SICAM PAS allows local authenticated users to recover user passwords and access the database. How to fix Update your software up to the latest version Advisory...

PT-2016-3179 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.07 Description: The issue is related to insufficient password protection in databases, which could allow a local attacker with certain database privileges to calculate passwords. Additionally, it may enab...

PT-2016-3178 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.07 Description: The issue is related to insufficient password protection in the database of the Siemens SICAM PAS system, which can be exploited by a local attacker to calculate passwords using certain...

PT-2016-29: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS allows local users to obtain sensitive configuration information by leveraging database stoppage. How to fix Please contact the Siemens Energy Customer...

Siemens SICAM MIC Authentication Bypass Vulnerability

Siemens SICAM MIC is a modular remote control device for energy automation belonging to the SICAM RTU product family. An authentication bypass vulnerability exists in Siemens SICAM MIC versions prior to 2404, which can be exploited by a remote attacker to perform administrator actions by accessin...

CVE-2015-5386

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

Authentication flaw

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

CVE-2015-5386

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

CVE-2015-5386

CVE-2015-5386 affects Siemens SICAM MIC devices with firmware versions prior to 2404. The vulnerability allows remote attackers to bypass authentication and obtain administrative access through the device’s web interface (port 80/TCP), enabling possibly unrestricted control of SICAM MIC. Root cau...

Authentication Bypass Bug Hits Siemens Energy Automation Device

An authentication bypass vulnerability in a Siemens device that’s used in energy automation systems could allow an attacker to gain control of the device. The vulnerability is in the Siemens SICAM MIC, a small telecontrol system that performs a number of functions and includes an integrated Web...

Siemens SICAM MIC Authentication Bypass Vulnerability

OVERVIEW Siemens has identified an authentication bypass vulnerability in its SICAM MIC telecontrol device. This vulnerability was reported directly to Siemens by Philippe Oechslin from Objectif Sécurité. Siemens has produced a new firmware update to mitigate this vulnerability. This vulnerabilit...