Siemens SICAM PQ Analyzer

1. EXECUTIVE SUMMARY CVSS v3 3.4 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SICAM PQ Analyzer Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve persistence on the system or cause a...

Siemens SICAM A8000

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SICAM A8000 Vulnerabilities: Use of Hard-coded Credentials, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a privileged user...

POWER METER SICAM Q100 Remote Code Execution Vulnerability

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events.The POWER METER SICAM Q100 remote code execution vulnerability can be exploited by remote attackers to execute remote code...

CVE-2021-44165

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41. The affected firmware contains a buffer overflow vulnerability in the web application...

CVE-2021-44165

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41. The affected firmware contains a buffer overflow vulnerability in the web application...

Buffer overflow

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41, POWER METER SICAM Q100 All versions V2.41. The affected firmware contains a buffer overflow vulnerability in the web application...

CVE-2021-44165

CVE-2021-44165 affects Siemens POWER METER SICAM Q100 firmware prior to v2.41. The issue is a stack-based buffer overflow in the web application that could allow a remote attacker with engineer or admin privileges to execute arbitrary code remotely. Affected devices include multiple SKUs of the S...

POWER METER SICAM Q100 安全漏洞

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events.The POWER METER SICAM Q100 remote code execution vulnerability can be exploited by remote attackers to execute remote code...

Siemens POWER METER SICAM Q100

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: POWER METER SICAM Q100 Vulnerability: Stack-based Buffer Overflow\ 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code...

Siemens Product WIBU Systems CodeMeter Runtime Denial of Service Vulnerability

PSSRCAPE is a transmission and distribution network protection simulation software. pssRE i is a power system simulation and analysis tool for transmission operation and planning. pssRODMS i is a transmission network modeling and analysis tool. sicam 230 is a scalable process control system for a...

Siemens Sicam Out-of-bounds Read

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. By performing a flooding attack against the web server, an attacker might be able to gain read access to the device's memory, possibly revealing confidential information. File...

Siemens Sicam Use of Password Hash With Insufficient Computational Effort

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with local access to the device might be able to retrieve some passwords in clear text. File data ot500439.nasl...

Siemens Sicam Protection Mechanism Failure

A vulnerability has been identified in SICAM A8000 CP-8000 All versions V16, SICAM A8000 CP-8021 All versions V16, SICAM A8000 CP-8022 All versions V16. A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position...

Siemens Sicam Missing Authentication for Critical Function

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with access to the device's web server might be able to execute administrative commands without authentication. File data ot500430.nasl...

Siemens Sicam Missing Authentication for Critical Function

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with access to the network could be able to install specially crafted firmware to the device. File data ot500482.nasl...

Siemens Sicam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. The web server could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into accessing a malicious link. File data ot500415.nasl...

Siemens Sicam Authentication Bypass by Capture-replay

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An error in the challenge-response procedure could allow an attacker to replay authentication traffic and gain access to protected areas of the web application. File data...

Siemens Sicam Missing Encryption of Sensitive Data

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to...

Siemens Sicam Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. A buffer overflow in various positions of the web application might enable an attacker with access to the web application to execute arbitrary code over the network. File data...

Siemens Sicam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs All versions V05.30. The login screen does not sufficiently sanitize input, which enables an attacker to generate specially crafted log messages. If an unsuspecting victim views the log messages via the web browser,...