Critical · published October 11, 2022
🔥 An unauthenticated attacker can crash or hijack SICAM P850/P855 devices with a single rogue GET request! Imagine a restaurant where a customer can call in an order without verification and request the chef to prepare a dish that causes the kitchen to shut down entirely — that's how this vulnerability works! This is absolutely devastating! An attacker could easily plunge the device into a denial of service state, or even worse, execute arbitrary code, potentially gaining control over critical systems. Such power in the wrong hands could lead to serious operational disruptions!
Imagine a restaurant where a customer can call in an order without verification and request the chef to prepare a dish that causes the kitchen to shut down entirely — that's how this vulnerability works! The vulnerability arises from the devices’ failure to properly validate a parameter in a specific GET request, allowing an attacker to manipulate the device's program counter and execute harmful commands. This affects all versions of the SICAM P850 and P855 below V3.10, as well as SICAM T below V3.0.
This is absolutely devastating! An attacker could easily plunge the device into a denial of service state, or even worse, execute arbitrary code, potentially gaining control over critical systems. Such power in the wrong hands could lead to serious operational disruptions! Immediately update your SICAM devices to version 3.10 or higher to patch this vulnerability. Additionally, review your network configurations to limit access to these devices and consider enabling authentication for all critical requests. You've got this! Take these steps, and you'll lift that security shield around your systems. 🛡️