PT-2016-7671
CVE-2016-9155
·
Published
2016-11-22
·
Updated
2016-12-23
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SIEMENS IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 versions prior to 1.41 SP18 S1
SIEMENS IP Camera Models CCPW3025, CCPW5025 versions prior to 0.1.73 S1
SIEMENS IP Camera Models CCMD3025-DN18 versions prior to v1.394 S1
SIEMENS IP Camera Models CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 versions prior to v2635 SP1
Description
The issue allows an attacker with network access to the web server to obtain administrative credentials under certain circumstances.
Recommendations
For SIEMENS IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025, update to version 1.41 SP18 S1 or later.
For SIEMENS IP Camera Models CCPW3025, CCPW5025, update to version 0.1.73 S1 or later.
For SIEMENS IP Camera Models CCMD3025-DN18, update to version v1.394 S1 or later.
For SIEMENS IP Camera Models CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025, update to version v2635 SP1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾