Threat Investigation
Request a demo

CVE-2022-29884

High

Description

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.

SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Sicam A8000 Cp-8000 Firmware
PublishedJul 12, 2022
First seenJul 12, 2022
Weakness typeCWE-772CWE-772

How to fix

Update
  • siemens sicam_a8000_cp-8000_firmware16.30 or later
  • siemens sicam_a8000_cp-8021_firmware16.30 or later
  • siemens sicam_a8000_cp-8022_firmware16.30 or later

Affected products

ProductAffected versionsFixed in
siemens sicam_a8000_cp-8000_firmwarev < 16.3016.30
siemens sicam_a8000_cp-8021_firmwarev < 16.3016.30
siemens sicam_a8000_cp-8022_firmwarev < 16.3016.30

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.