CVE-2015-5386

EPSS 0.73%
Veröffentlicht 16.07.2015 19:59:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Siemens ≫ Sicam Mic Firmware Version <= 2403

Siemens ≫ Sicam Mic

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.73%	0.717

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-632547.pdf

Patch

Vendor Advisory

https://ics-cert.us-cert.gov/advisories/ICSA-15-195-01

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2015-5386

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-5386

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-5386

EUVD