CVE-2022-29884: High severity siemens sicam a8000 vulnerability
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-29884.
What is the severity of CVE-2022-29884?
The severity of CVE-2022-29884 is high with a severity value of 7.5.
Which software versions are affected by CVE-2022-29884?
All versions of CP-8000 MASTER MODULE WITH I/O -25/+70°C, CP-8000 MASTER MODULE WITH I/O -40/+70°C, CP-8021 MASTER MODULE, and CP-8022 MASTER MODULE WITH GPRS are affected by CVE-2022-29884.
How can I fix CVE-2022-29884?
To fix CVE-2022-29884, you should update your Siemens Sicam A8000 Cp-8000 and Cp-8021/8022 firmware to version 16.30 or higher.
Where can I find more information about CVE-2022-29884?
You can find more information about CVE-2022-29884 at the following reference link: [Siemens CERT Portal](https://cert-portal.siemens.com/productcert/pdf/ssa-491621.pdf)