CVE-2022-29884

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-12 · updated 2026-06-17
Weakness: CWE-772

Description

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.

Affected products

Siemens Sicam A8000 Cp-8000 Firmware: before 16.30 — fixed in 16.30
Siemens Sicam A8000 Cp-8021 Firmware: before 16.30 — fixed in 16.30
Siemens Sicam A8000 Cp-8022 Firmware: before 16.30 — fixed in 16.30

How to fix

Upgrade to a fixed version: Siemens Sicam A8000 Cp-8000 Firmware 16.30; Siemens Sicam A8000 Cp-8021 Firmware 16.30; Siemens Sicam A8000 Cp-8022 Firmware 16.30. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-29884 or the next vulnerability affects your stack