CVE-2018-13798: Siemens Sicam a8000 CP-8000 Firmware

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V14), SICAM A8000 CP-802X (All versions < V14), SICAM A8000 CP-8050 (All versions < V2.00). Specially crafted network packets sent to port 80/TCP or 443/TCP could allow an unauthenticated remote attacker to cause a Denial-of-Service condition of the web server. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 80/TCP or 443/TCP. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the web server. A system reboot is required to recover the web service of the device. At the time of advisory update, exploit code for this security vulnerability is public.

Affected products

• Siemens Sicam a8000 CP-8000 Firmware: before 14 (fixed in 14)
• Siemens Sicam a8000 CP-802x Firmware: before 14 (fixed in 14)
• Siemens Sicam a8000 CP-8050 Firmware: before 2.00 (fixed in 2.00)

Published 2019-03-21. Last modified 2026-06-17.