Vulnerability · Published Nov 8, 2022 · Assigned by siemens
CVE-2022-43439
Critical 9.9
In plain English
A critical-severity improper input validation in POWER METER SICAM Q100 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 81% of all known vulnerabilities).
Official description
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA31-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA31-2AA1) (All versions < V2.50), SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.10), SICAM T (All versions < V3.0). Affected devices do not properly validate the Language-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | POWER METER SICAM Q100 | 0 – before V2.50 |
| Siemens | POWER METER SICAM Q100 | 0 – before V2.50 |
| Siemens | POWER METER SICAM Q100 | 0 – before V2.50 |
| Siemens | POWER METER SICAM Q100 | 0 – before V2.50 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P850 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
| Siemens | SICAM P855 | All versions < V3.10 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-572005.html
- https://cert-portal.siemens.com/productcert/html/ssa-570294.html
- https://cert-portal.siemens.com/productcert/html/ssa-887249.html
- https://cert-portal.siemens.com/productcert/html/ssa-471761.html