What’s Vulnerable › Vulnerabilities

CVE-2016-9155

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-11-22 · updated 2026-06-17
• Weakness: CWE-284

Description

The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1.73_S1; CCMD3025-DN18 prior to version v1.394_S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 prior to version v2635_SP1 could allow an attacker with network access to the web server to obtain administrative credentials under certain circumstances.

Affected products

• Siemens Ccid1445-Dn18 Firmware: all versions
• Siemens Ccid1445-Dn28 Firmware: all versions
• Siemens Ccid1445-Dn36 Firmware: all versions
• Siemens Ccis1425 Firmware: all versions
• Siemens Ccmd3025-Dn18 Firmware: all versions
• Siemens Ccms2025 Firmware: all versions
• Siemens Ccmw1025 Firmware: all versions
• Siemens Ccmw3025 Firmware: all versions
• Siemens Ccpw3025 Firmware: all versions
• Siemens Cfis1425 Firmware: all versions
• Siemens Cfms2025 Firmware: all versions
• Siemens Cfmw1025 Firmware: all versions
• Siemens Cfmw3025 Firmware: all versions
• Siemens Cvms2025-Ir Firmware: all versions
• Siemens Cvmw3025-Ir Firmware: all versions

References

• http://www.securityfocus.com/bid/94392
• https://ics-cert.us-cert.gov/advisories/ICSA-16-322-01
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284765.pdf
• http://www.securityfocus.com/bid/94392
• https://ics-cert.us-cert.gov/advisories/ICSA-16-322-01
• https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-284765.pdf

Get alerted when CVE-2016-9155 or the next vulnerability affects your stack