CVE-2022-27480

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-12 · updated 2026-06-17
Weakness: CWE-862

Description

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.

Affected products

Siemens Sicam A8000 Cp-8031 Firmware: before 4.80 — fixed in 4.80
Siemens Sicam A8000 Cp-8050 Firmware: before 4.80 — fixed in 4.80

How to fix

Upgrade to a fixed version: Siemens Sicam A8000 Cp-8031 Firmware 4.80; Siemens Sicam A8000 Cp-8050 Firmware 4.80. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.html
http://seclists.org/fulldisclosure/2022/Apr/20
https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdf
http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.html
http://seclists.org/fulldisclosure/2022/Apr/20
https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdf

Get alerted when CVE-2022-27480 or the next vulnerability affects your stack