CVEvulnerability

CVE-2016-9155

9.8 CRITICAL Published 2016-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-284

Description

The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1.73_S1; CCMD3025-DN18 prior to version v1.394_S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 prior to version v2635_SP1 could allow an attacker with network access to the web server to obtain administrative credentials under certain circumstances.

Affected configurations

• siemens ccid1445-dn18 firmware • siemens ccid1445-dn28 firmware • siemens ccid1445-dn36 firmware • siemens ccis1425 firmware • siemens ccmd3025-dn18 firmware • siemens ccms2025 firmware • siemens ccmw1025 firmware • siemens ccmw3025 firmware • siemens ccpw3025 firmware • siemens cfis1425 firmware • siemens cfms2025 firmware • siemens cfmw1025 firmware • siemens cfmw3025 firmware • siemens cvms2025-ir firmware • siemens cvmw3025-ir firmware

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References