[NEU] [mittel] Siemens SICAM 8: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, sich unbefugten Zugriff zu verschaffen, Berechtigungen zu erweitern oder bösartige Firmware zu installieren und eine dauerhafte Codeausführung zu erreichen.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3232
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-547980.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-547990.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-548000.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-548010.62% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-54798 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-54799 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-54800 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-54801 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownexploitedNCSC-2026-0346 [1.01] [M/H] Kwetsbaarheden verholpen in Siemens productenncsc-nl
- criticalSiemens SICAM 8cisa
- unknownNCSC-2026-0225 [1.00] [M/H] Vulnerabilities fixed in Siemens SICOREncsc-nl
- unknownMultiple vulnerabilities in Siemens products (July 10, 2026)cert-fr-avis
- highCVE-2026-54801: A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <…nvd
- mediumCVE-2026-54800: A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <…nvd
- mediumCVE-2026-54799: A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <…nvd
- mediumCVE-2026-54798: A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <…nvd
Recent advisories for Siemens SICAM 8
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalSiemens SICAM 8cisa · 2026-07-16
More from CERT-Bund (BSI) Security Advisories
- medium[UPDATE] [mittel] vim: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] ffmpeg: Mehrere Schwachstellen ermöglichen Codeausführung und DoS2026-09-10
- high[UPDATE] [hoch] ffmpeg: Mehrere Schwachstellen2026-09-10
- medium[UPDATE] [mittel] Unbound: Mehrere Schwachstellen2026-09-10
- high[UPDATE] [hoch] Internet Systems Consortium BIND: Mehrere Schwachstellen2026-09-10