CVE-2020-28396: Siemens Sicam a8000 CP-8000 Firmware

High severity, CVSS 7.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP-8021 (All versions < V16), SICAM A8000 CP-8022 (All versions < V16). A web server misconfiguration of the affected device can cause insecure ciphers usage by a user´s browser. An attacker in a privileged position could decrypt the communication and compromise confidentiality and integrity of the transmitted information.

Affected products

• Siemens Sicam a8000 CP-8000 Firmware: before 16 (fixed in 16)
• Siemens Sicam a8000 CP-8021 Firmware: before 16 (fixed in 16)
• Siemens Sicam a8000 CP-8022 Firmware: before 16 (fixed in 16)

Published 2020-12-14. Last modified 2026-06-17.