SSA-620338 V1.0: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM

SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition.

• SICAM AK3 device firmware
  
  
  
  • CPCX26 for CP-2016
  
  
  • PCCX26 for CP-2019
  
  


• SICAM AK3, SICAM BC and SICAM TM device firmware
  
  
  
  • ETA4 and ETA5 for SM-2558
  
  

Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.

attacker buffer buffer overflow buffer overflow vulnerability code context current denial of service device devices firmware overflow process service ssa vulnerability