Detections
Analytics
Siemens SICAM A8000 Improper Access Control (CVE-2021-45034)
high Tenable OT Security Plugin ID 501067
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O-25/+70C (All versions < V16.20), CP-8000 MASTER MODULE WITH I/O
-40/+70C (All versions < V16.20), CP-8021 MASTER MODULE (All versions < V16.20), CP-8022 MASTER MODULE WITH GPRS (All versions < V16.20).
The web server of the affected system allows access to logfiles and diagnostic data generated by a privileged user. An unauthenticated attacker could access the files by knowing the corresponding download links.
This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.Siemens recommends updating to v16.20 or later.
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends users configure the environment according to Siemens’ operational guidelines for Industrial Security and follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
For more information about these vulnerabilities, see Siemens’ security advisory SSA-324998
See Also
https://cert-portal.siemens.com/productcert/pdf/ssa-324998.pdf
https://www.cisa.gov/news-events/ics-advisories/icsa-22-013-02
Plugin Details
Severity: High
ID: 501067
Version: 1.5
Type: remote
Family: Tenable.ot
Published: 4/20/2023
Updated: 9/4/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2021-45034
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:siemens:cp-8022_master_module_with_gprs_firmware, cpe:/o:siemens:cp-8000_master_module_with_i%2fo_-40%2f%2b70_firmware, cpe:/o:siemens:cp-8021_master_module_firmware, cpe:/o:siemens:cp-8000_master_module_with_i%2fo_-25%2f%2b70_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/11/2022
Vulnerability Publication Date: 1/11/2022
Reference Information
CVE: CVE-2021-45034
CWE: 532
ICSA: 22-013-02