Session fixation in Siemens SICAM P850
Priority LOW 39CWE-384Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-384.
Summary
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.10), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.10), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.10), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.10), SICAM T (All versions < V3.0). Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user's session after login.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00815 57th percentileScored 2026-11-07
Fix Fixed SICAM P850 (Siemens): V3.10SICAM P855 (Siemens): V3.10+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM T | before V3.0 | V3.0 | Patch available | CNA |
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM T VendorSiemens Affected before V3.0 Fixed in V3.0 Patch available CNA
CPE configurations NVD · 72
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 62 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:* | before 3.10 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:* Versions before 3.10 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM T (Siemens) Fixed in V3.0
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens SICAM T V3.0
2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2022-20060 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions <…Priority MEDIUM 52
Timeline
- 2026-10-02 Threatist record created from CVE-2022-40226
- 2026-10-03 Alias added: GHSA-chg2-rqmj-8f6x
References
More Siemens 7kg8500-0aa00-0aa0 Firmware vulnerabilities
- TI-2022-20060 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions <… CVSS 3.1CRITICAL 9.8
- TI-2022-12228 A vulnerability has been identified in SICAM T (All versions < V3.0). CVSS 4.0CRITICAL 9.3
- TI-2022-12227 Improper input validation in Siemens SICAM T CVSS 4.0HIGH 8.7
- TI-2022-12229 Cleartext transmission of sensitive information in Siemens SICAM T CVSS 3.1HIGH 8.8
- TI-2022-12233 Authentication bypass by capture-replay in Siemens SICAM T CVSS 3.1HIGH 8.1
- TI-2022-12238 Improper authentication in Siemens SICAM T CVSS 4.0MEDIUM 6.9
Sources
- CVE-2022-40226 · CVE Program
- CVE-2022-40226 · NVD
- FIRST EPSS
- GHSA-chg2-rqmj-8f6x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences