PT-2015-6879 · Siemens · Sicam Mic

Philippe Oechslin · Publicado 2015-07-16 · Atualizado 2015-07-17 · CVE-2015-5386

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SICAM MIC devices with firmware prior to 2404

Description The issue allows remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests.

Recommendations For firmware versions prior to 2404, update the firmware to version 2404 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-5386

Produtos afetados

Sicam Mic

Referências · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-632547.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-5386 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-195-01 · Nota