Missing authorization in Siemens SICAM A8000 CP-8031
Priority LOW 38CWE-862Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-862.
Summary
A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.
Why it matters now
EPSS 0.02484 84th percentileScored 2026-11-07
Fix Fixed SICAM A8000 CP-8031 (Siemens): V4.80SICAM A8000 CP-8050 (Siemens): V4.80
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SICAM A8000 CP-8031 | before V4.80 | V4.80 | Patch available | CNA |
| Siemens | SICAM A8000 CP-8050 | before V4.80 | V4.80 | Patch available | CNA |
- SICAM A8000 CP-8031 VendorSiemens Affected before V4.80 Fixed in V4.80 Patch available CNA
- SICAM A8000 CP-8050 VendorSiemens Affected before V4.80 Fixed in V4.80 Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:sicam_a8000_cp-8031_firmware:*:*:*:*:*:*:*:* | before 4.80 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sicam_a8000_cp-8031:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sicam_a8000_cp-8050_firmware:*:*:*:*:*:*:*:* | before 4.80 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sicam_a8000_cp-8050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:sicam_a8000_cp-8031_firmware:*:*:*:*:*:*:*:* Versions before 4.80 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sicam_a8000_cp-8031:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sicam_a8000_cp-8050_firmware:*:*:*:*:*:*:*:* Versions before 4.80 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sicam_a8000_cp-8050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SICAM A8000 CP-8031 (Siemens) Fixed in V4.80
- Fix · CNA SICAM A8000 CP-8050 (Siemens) Fixed in V4.80
Timeline
- 2026-10-02 Threatist record created from CVE-2022-27480
- 2026-10-03 Alias added: GHSA-fcp5-57p2-vf46
References
More Siemens Sicam A8000 Cp-8031 Firmware vulnerabilities
- TI-2023-22888 Use of uninitialized resource in Siemens CP-8031 MASTER MODULE CVSS 3.1HIGH 7.2
Sources
- CVE-2022-27480 · CVE Program
- CVE-2022-27480 · NVD
- FIRST EPSS
- GHSA-fcp5-57p2-vf46 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences