PT-2015-6879 · Siemens · Sicam Mic

Philippe Oechslin · Published 2015-07-16 · Updated 2015-07-17 · CVE-2015-5386

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SICAM MIC devices with firmware prior to 2404

Description The issue allows remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests.

Recommendations For firmware versions prior to 2404, update the firmware to version 2404 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-5386

Affected Products

Sicam Mic

References · 3

• http://siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-632547.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5386 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-195-01 · Note