high7.5
CVE-2022-29884
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All ve…
Impact
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Sicam A8000 Cp-8000 Firmware | before 16.30 |
| Siemens | Sicam A8000 Cp-8021 Firmware | before 16.30 |
| Siemens | Sicam A8000 Cp-8022 Firmware | before 16.30 |