CVE-2022-43545

Опубликовано: 08 нояб. 2022

Источник: nvd

CVSS3: 9.9

CVSS3: 8.8

EPSS Низкий

Описание

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SIC

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
Mitigation
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
Mitigation
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:siemens:7kg9501-0aa01-2aa1_firmware:*:*:*:*:*:*:*:*

Версия до 2.50 (исключая)

cpe:2.3:h:siemens:7kg9501-0aa01-2aa1:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:siemens:7kg9501-0aa31-2aa1_firmware:*:*:*:*:*:*:*:*

Версия до 2.50 (исключая)

cpe:2.3:h:siemens:7kg9501-0aa31-2aa1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01135

Низкий

9.9 Critical

CVSS3

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-xvw3-v5p5-pf8m

CVSS3: 8.8

github

почти 3 года назад

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

BDU:2022-07317

CVSS3: 8.8

fstec

почти 3 года назад

Уязвимость параметра RecordType веб-интерфейса микропрограммного обеспечения измерителя мощности POWER METER SICAM Q100, позволяющая нарушителю вывести устройство из строя (с последующей автоматической перезагрузкой) или выполнить произвольный код

EPSS

Процентиль: 77%

0.01135

Низкий

9.9 Critical

CVSS3

8.8 High

CVSS3

Дефекты

CWE-20