CVE-2022-29884: Siemens Sicam a8000 CP-8000 Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.

Affected products

• Siemens Sicam a8000 CP-8000 Firmware: before 16.30 (fixed in 16.30)
• Siemens Sicam a8000 CP-8021 Firmware: before 16.30 (fixed in 16.30)
• Siemens Sicam a8000 CP-8022 Firmware: before 16.30 (fixed in 16.30)

Published 2022-07-12. Last modified 2026-06-17.