Paper/Archive/CVE-2022-43545

CVE-2022-43545

Siemens POWER METER SICAM Q100 — A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWE…

Description · from the CVE record

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

Affected

ProductAffectedFixed inSource
POWER METER SICAM Q100All versions < V2.50–CNA
POWER METER SICAM Q100All versions < V2.50–CNA
POWER METER SICAM Q100All versions < V2.50–CNA
POWER METER SICAM Q100All versions < V2.50–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA
SICAM P850All versions < V3.10–CNA

Scores by source

siemens (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

References

refcert-portal.siemens.com/productcert/pdf/ssa-572005.pdfrefcert-portal.siemens.com/productcert/pdf/ssa-570294.pdfrefcert-portal.siemens.com/productcert/pdf/ssa-887249.pdf