Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SICAM Q200 Devices Cross-Site Request Forgery (CVE-2023-30901)

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60, POWER METER SICAM Q100 All versions V2.60. The web interface of the affected devices are vulnerable to Cross-Site Request Forgery...

CVE-2023-30901

A vulnerability has been identified in SICAM P850 7KG8500-0AA00-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA00-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-0AA0 All versions V3.11, SICAM P850 7KG8500-0AA10-2AA0 All versions V3.11, SICAM P850 7KG8500-0AA30-0AA0 All versions V3.11, SICAM P8...

CVE-2023-30901

CVE-2023-30901 is a Cross-Site Request Forgery vulnerability impacting Siemens SICAM Q100 family (and related Q200 references in CERT advisories). Affected products include POWER METER SICAM Q100 variants with firmware versions prior to V2.60. Root cause: web interface does not adequately protect...