CVE-2022-27480

State: Published
Severity: Not scored
Published: Apr 12, 2022
Updated: Aug 3, 2024
Reserved: Mar 21, 2022

Description

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.

Scores

The record has no CVSS score.

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SICAM A8000 CP-8031Siemens	All versions < V4.80Affected
SICAM A8000 CP-8050Siemens	All versions < V4.80Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdf
20220414 SEC Consult SA-20220413 :: Missing Authentication at File Download & Denial of Service in Siemens A8000 PLCmailing-list
http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.