Challenge-Response Vulnerability in SICAM P850 and P855 Devices by Siemens

CVE-2022-29878

What is CVE-2022-29878?

A challenge-response vulnerability has been identified in the SICAM P850 and P855 devices, affecting all versions prior to V3.00. This flaw arises from the limited range of challenges sent during unencrypted challenge-response communications. An unauthenticated attacker could exploit this by capturing a valid challenge-response pair, enabling them to repeatedly request the same challenge and gain unauthorized access to the device's management interface. This poses significant risks to the integrity and security of the affected devices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References