Read the docs
TI-2018-10010 Aliases CVE-2018-13798GHSA-fww6-rw9g-qvh7

Improper input validation in Siemens SICAM A8000 CP-8000, SICAM A8000 CP-802X, SICAM…

Priority LOW 37CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

Why it matters now

EPSS 0.01986 80th percentileScored 2026-11-07
Fix Fixed SICAM A8000 CP-8050 (Siemens AG): V2.00

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensSICAM A8000 CP-8000, SICAM A8000 CP-802X, SICAM A8000 CP-8050SICAM A8000 CP-8000 : All versions < V14—No fix listedCNA
SiemensSICAM A8000 CP-802XSICAM A8000 CP-802X : All versions < V14—No fix listedCNA
SiemensSICAM A8000 CP-8050before V2.00V2.00Patch availableCNA
  • SICAM A8000 CP-8000, SICAM A8000 CP-802X, SICAM A8000 CP-8050 VendorSiemens Affected SICAM A8000 CP-8000 : All versions < V14 Fixed in — No fix listed CNA
  • SICAM A8000 CP-802X VendorSiemens Affected SICAM A8000 CP-802X : All versions < V14 Fixed in — No fix listed CNA
  • SICAM A8000 CP-8050 VendorSiemens Affected before V2.00 Fixed in V2.00 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:siemens:sicam_a8000_cp-8000_firmware:*:*:*:*:*:*:*:*before 14VulnerableSiemens
cpe:2.3:h:siemens:sicam_a8000_cp-8000:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:sicam_a8000_cp-802x_firmware:*:*:*:*:*:*:*:*before 14VulnerableSiemens
cpe:2.3:h:siemens:sicam_a8000_cp-802x:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:sicam_a8000_cp-8050_firmware:*:*:*:*:*:*:*:*before 2.00VulnerableSiemens
cpe:2.3:h:siemens:sicam_a8000_cp-8050:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:siemens:sicam_a8000_cp-8000_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:sicam_a8000_cp-8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:sicam_a8000_cp-802x_firmware:*:*:*:*:*:*:*:* Versions before 14 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:sicam_a8000_cp-802x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:sicam_a8000_cp-8050_firmware:*:*:*:*:*:*:*:* Versions before 2.00 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:sicam_a8000_cp-8050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

  • Fix · CNA SICAM A8000 CP-8050 (Siemens AG) Fixed in V2.00

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-13798
  2. 2026-10-03 Alias added: GHSA-fww6-rw9g-qvh7

References

Patch 1

  • TI-2022-12239 A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All… CVSS 3.1HIGH 7.5
  • TI-2020-17225 Protection mechanism failure in Siemens SICAM A8000 CP-8000 CVSS 3.1HIGH 7.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences