CVE-2016-9155
Critical
Description
The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1.73_S1; CCMD3025-DN18 prior to version v1.394_S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 prior to version v2635_SP1 could allow an attacker with network access to the web server to obtain administrative credentials under certain circumstances.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSiemens Ccid1445-dn18 Firmware
PublishedNov 22, 2016
First seenNov 22, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens ccid1445-dn18_firmware | No range specified | — |
| siemens ccid1445-dn28_firmware | No range specified | — |
| siemens ccid1445-dn36_firmware | No range specified | — |
| siemens ccis1425_firmware | No range specified | — |
| siemens ccmd3025-dn18_firmware | No range specified | — |
| siemens ccms2025_firmware | No range specified | — |
| siemens ccmw1025_firmware | No range specified | — |
| siemens ccmw3025_firmware | No range specified | — |
| siemens ccpw3025_firmware | No range specified | — |
| siemens cfis1425_firmware | No range specified | — |
| siemens cfms2025_firmware | No range specified | — |
| siemens cfmw1025_firmware | No range specified | — |
| siemens cfmw3025_firmware | No range specified | — |
| siemens cvms2025-ir_firmware | No range specified | — |
| siemens cvmw3025-ir_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.