CVE Catalog

CVE-2016-9155

Critical
Published: Translated: NVD NIST

Summary

Certain SIEMENS branded IP camera models may allow an attacker with network access to obtain administrative credentials. This affects models prior to specific software versions.

Risk Assessment

The risk associated with this vulnerability is the potential for unauthorized access to the system, which could lead to serious security breaches and data loss.

Recommendation

It is recommended to update the camera firmware to the latest versions to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1.73_S1; CCMD3025-DN18 prior to version v1.394_S1; CCID1445-DN18, CCID1445-DN28, CCID1145-DN36, CFIS1425, CCIS1425, CFMS2025, CCMS2025, CVMS2025-IR, CFMW1025, CCMW1025 prior to version v2635_SP1 could allow an attacker with network access to the web server to obtain administrative credentials under certain circumstances.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS