Challenge-Response Vulnerability in SICAM P850 and P855 Devices by Siemens

CVE-2022-29878

Summary

A challenge-response vulnerability has been identified in the SICAM P850 and P855 devices, affecting all versions prior to V3.00. This flaw arises from the limited range of challenges sent during unencrypted challenge-response communications. An unauthenticated attacker could exploit this by capturing a valid challenge-response pair, enabling them to repeatedly request the same challenge and gain unauthorized access to the device's management interface. This poses significant risks to the integrity and security of the affected devices.

References