CVE-2023-30901

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA00-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA10-2AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-0AA0) (All versions < V3.11), SICAM P855 (7KG8550-0AA30-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA01-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA02-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA11-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA12-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA31-2AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-0AA0) (All versions < V3.11), SICAM P855 (7KG8551-0AA32-2AA0) (All versions < V3.11), SICAM T (All versions < V3.0). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.

• CWE-352
• CWE-352

• https://cert-portal.siemens.com/productcert/html/ssa-201498.html
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html
• https://cert-portal.siemens.com/productcert/html/ssa-480095.html
• https://cert-portal.siemens.com/productcert/html/ssa-887249.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdfPatch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdfPatch, Vendor Advisory

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3089A compliance problem was found in the Red Hat OpenShift Cont…7.5
• CVE-2023-30897A vulnerability has been identified in SIMATIC WinCC (All ve…7.8
• CVE-2023-30898A vulnerability has been identified in Siveillance Video 202…8.8
• CVE-2023-30899A vulnerability has been identified in Siveillance Video 202…8.8
• CVE-2023-3090A heap out-of-bounds write vulnerability in the Linux Kernel…7.8
• CVE-2023-30900A vulnerability has been identified in Xpedition Layout Brow…7.8
• CVE-2023-30902A privilege escalation vulnerability in the Trend Micro Apex…5.5
• CVE-2023-30903HP-UX could be exploited locally to create a Denial of Servi…5.5
• CVE-2023-30904A security vulnerability in HPE Insight Remote Support may r…5.5
• CVE-2023-30905The MC990 X and UV300 RMC component has and inadequate defau…7.8
• CVE-2023-30906The vulnerability could be locally exploited to allow escala…7.8
• CVE-2023-30908A remote authentication bypass issue exists in a OneView API…9.8