PT-2016-3178 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to 8.07 Description: The issue is related to insufficient password protection in the database of the Siemens SICAM PAS system, which can be exploited by a local attacker to calculate passwords using certain...

PT-2016-28: Information Disclosure in Siemens SICAM PAS

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in Siemens SICAM PAS. Siemens SICAM PAS does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database...

PT-2016-34: Password Recovery in Siemens SICAM PAS

The specialists of the Positive Research center have detected a Password Recovery vulnerability in Siemens SICAM PAS. Vulnerability in SICAM PAS allows local authenticated users to recover user passwords and access the database. How to fix Update your software up to the latest version Advisory...

Siemens SICAM MIC Authentication Bypass Vulnerability

Siemens SICAM MIC is a modular remote control device for energy automation belonging to the SICAM RTU product family. An authentication bypass vulnerability exists in Siemens SICAM MIC versions prior to 2404, which can be exploited by a remote attacker to perform administrator actions by accessin...

CVE-2015-5386

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

Authentication flaw

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

CVE-2015-5386

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

CVE-2015-5386

CVE-2015-5386 affects Siemens SICAM MIC devices with firmware versions prior to 2404. The vulnerability allows remote attackers to bypass authentication and obtain administrative access through the device’s web interface (port 80/TCP), enabling possibly unrestricted control of SICAM MIC. Root cau...

Authentication Bypass Bug Hits Siemens Energy Automation Device

An authentication bypass vulnerability in a Siemens device that’s used in energy automation systems could allow an attacker to gain control of the device. The vulnerability is in the Siemens SICAM MIC, a small telecontrol system that performs a number of functions and includes an integrated Web...

CVE-2015-5386: Improper Input Validation

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

PT-2015-6879

Name of the Vulnerable Software and Affected Versions Siemens SICAM MIC devices with firmware prior to 2404 Description The issue allows remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests. Recommendations For firmware versions prior to 2404,...

Siemens SICAM MIC Authentication Bypass Vulnerability

OVERVIEW Siemens has identified an authentication bypass vulnerability in its SICAM MIC telecontrol device. This vulnerability was reported directly to Siemens by Philippe Oechslin from Objectif Sécurité. Siemens has produced a new firmware update to mitigate this vulnerability. This vulnerabilit...