CVE-2020-10039: A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate ...

Summary

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write acc...

What to do

Update siemens sicam_mmu_firmware to version 2.05 or later.
Update siemens sicam_t_firmware to version 2.18 or later.

Affected software

Vendor	Product	Affected versions
siemens	sicam_mmu_firmware	< 2.05 `cpe:2.3:o:siemens:sicam_mmu_firmware::::::::`
siemens	sicam_sgu_firmware	All versions `cpe:2.3:o:siemens:sicam_sgu_firmware:-:::::::*`
siemens	sicam_t_firmware	< 2.18 `cpe:2.3:o:siemens:sicam_t_firmware::::::::`

Original advisory text

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate ...

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker in a privileged network position between a legitimate user and the web server might be able to conduct a Man-in-the-middle attack and gain read and write access to the transmitted data.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-305120.pdf Vendor Advisory