CVE-2022-43545
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | POWER METER SICAM Q100 | All versions < V2.50 | affected |
| Siemens | POWER METER SICAM Q100 | All versions < V2.50 | affected |
| Siemens | POWER METER SICAM Q100 | All versions < V2.50 | affected |
| Siemens | POWER METER SICAM Q100 | All versions < V2.50 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P850 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
| Siemens | SICAM P855 | All versions < V3.10 | affected |
Weaknesses
- CWE-20: CWE-20: Improper Input Validation
ADP Enrichment
CVE Program Container
Additional References
- https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.