Improper input validation in Siemens POWER METER SICAM Q100
Priority MEDIUM 47CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0208 81st percentileScored 2026-11-07
Fix Fixed POWER METER SICAM Q100 (Siemens): V2.50SICAM P850 (Siemens): V3.10+1 more product
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | POWER METER SICAM Q100 | before V2.50 | V2.50 | Patch available | CNA |
| Siemens | POWER METER SICAM Q100 | before V2.50 | V2.50 | Patch available | CNA |
| Siemens | POWER METER SICAM Q100 | before V2.50 | V2.50 | Patch available | CNA |
| Siemens | POWER METER SICAM Q100 | before V2.50 | V2.50 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P850 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
| Siemens | SICAM P855 | before V3.10 | V3.10 | Patch available | CNA |
- POWER METER SICAM Q100 VendorSiemens Affected before V2.50 Fixed in V2.50 Patch available CNA
- POWER METER SICAM Q100 VendorSiemens Affected before V2.50 Fixed in V2.50 Patch available CNA
- POWER METER SICAM Q100 VendorSiemens Affected before V2.50 Fixed in V2.50 Patch available CNA
- POWER METER SICAM Q100 VendorSiemens Affected before V2.50 Fixed in V2.50 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P850 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
- SICAM P855 VendorSiemens Affected before V3.10 Fixed in V3.10 Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:7kg9501-0aa01-2aa1_firmware:*:*:*:*:*:*:*:* | before 2.50 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg9501-0aa01-2aa1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:7kg9501-0aa31-2aa1_firmware:*:*:*:*:*:*:*:* | before 2.50 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:7kg9501-0aa31-2aa1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:7kg9501-0aa01-2aa1_firmware:*:*:*:*:*:*:*:* Versions before 2.50 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg9501-0aa01-2aa1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:7kg9501-0aa31-2aa1_firmware:*:*:*:*:*:*:*:* Versions before 2.50 Vulnerable ·Siemens
- cpe:2.3:h:siemens:7kg9501-0aa31-2aa1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA POWER METER SICAM Q100 (Siemens) Fixed in V2.50
- Fix · CNA POWER METER SICAM Q100 (Siemens) Fixed in V2.50
- Fix · CNA POWER METER SICAM Q100 (Siemens) Fixed in V2.50
- Fix · CNA POWER METER SICAM Q100 (Siemens) Fixed in V2.50
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P850 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
- Fix · CNA SICAM P855 (Siemens) Fixed in V3.10
Timeline
- 2026-10-02 Threatist record created from CVE-2022-43546
- 2026-10-03 Alias added: GHSA-q4h3-2q46-2v65
References
More Siemens 7kg9501-0aa01-2aa1 Firmware vulnerabilities
- TI-2022-21326 Improper input validation in Siemens POWER METER SICAM Q100 CVSS 3.1CRITICAL 9.9
- TI-2022-21234 Improper input validation in Siemens POWER METER SICAM Q100 CVSS 3.1CRITICAL 9.9
- TI-2022-21194 Session fixation in Siemens POWER METER SICAM Q100 CVSS 3.1HIGH 8.8
- TI-2021-19863 Stack-based buffer overflow in Siemens POWER METER SICAM Q100 CVSS 3.1HIGH 7.2
Sources
- CVE-2022-43546 · CVE Program
- CVE-2022-43546 · NVD
- FIRST EPSS
- GHSA-q4h3-2q46-2v65 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences