Siemens SICAM 8 Vulnerabilities: Debug Interface DoS and Firmware Signature Bypass

Vulnerability Overview Multiple vulnerabilities exist in Siemens SICAM 8 products, which may lead to Denial of Service (DoS). These vulnerabilities involve issues such as debug interfaces, firmware update mechanisms, default configurations, and insufficient authentication credential verification. Affected Products SICAM A8000 Device firmware - CPCIS for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 SICAM EGS Device firmware - CPCIS SICAM S8000 - SICORE Remediation CPCIS Central Processing/Communication - Update to version V26.20 or later. - Firmware CPCIS V26.20 is included in the "CP-8031/CP-8050 Package" V26.20 and the "SICAM EGS Package" V26.20. - Related links: https://support.industry.siemens.com/cs/ww/en/view/109792485 and https://support.industry.siemens.com/cs/ww/en/view/109772536 SICORE Base system - Update to version V26.20.0 or later. - Firmware SICORE V26.20.0 is included in the "CP-8010/CP-8012 Package" V26.20 and the "SICAM S8000 Package" V26.20. - Related links: https://support.industry.siemens.com/cs/ww/en/view/109772536 and https://support.industry.siemens.com/cs/ww/en/view/109818340 Vulnerability Details 1. Vulnerability CVE-2026-54798 - Description: The affected program contains a debug interface accessible via an HTTP endpoint, which may lead to Denial of Service. - CVSS v3.1 Base Score: 6.5 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS v4.0 Base Score: 7.1 - CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VA:N/SC:N/SI:N/NA:N - CWE: CWE-489: Active Debug Code 2. Vulnerability CVE-2026-54799 - Description: The affected program has a vulnerability in the signature verification process of its firmware update mechanism, potentially allowing malicious firmware installation, leading to persistent code execution and system compromise. - CVSS v3.1 Base Score: 6.7 - CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v4.0 Base Score: 8.4 - CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VA:H/SC:N/SI:N/NA:N - CWE: CWE-489: Active Debug Code 3. Vulnerability CVE-2026-54800 - Description: The affected program disables OPC UA security mechanisms by default, potentially leading to unauthorized access and control of critical functions. - CVSS v3.1 Base Score: 4.9 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - CVSS v4.0 Base Score: 6.3 - CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VA:L/SC:N/SI:N/NA:N - CWE: CWE-1188: Initialization of a Resource with an Insecure Default 4. Vulnerability CVE-2026-54801 - Description: The affected program lacks sufficient validation when processing authentication credential modifications via the Web API, potentially leading to unauthorized privilege escalation. - CVSS v3.1 Base Score: 7.2 - CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v4.0 Base Score: 8.6 - CVSS v4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VA:H/SC:N/SI:N/NA:N - CWE: CWE-602: Unverified Password Change Additional Information General Security Recommendations: Operators are advised to implement multi-layered redundant security protection mechanisms and follow the security update guidelines provided by Siemens. Product Description: SICAM 8 products are used for monitoring and control in power systems. Historical Data: V1.0 released on 2026-07-09. Terms of Use: The use of Siemens security bulletins is subject to relevant terms and conditions. Code Blocks No POC code or exploitation code is provided.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens SICAM 8 Vulnerabilities: Debug Interface DoS and Firmware Signature Bypass