Siemens SICAM P850 and P855 Devices

An attacker with access to the SICAM device web interface could exploit session fixation to hijack an operator's session and execute commands on the device, potentially altering grid control settings or disrupting power distribution operations.

Siemens SICAM P850 and P855 are power system monitoring and control devices used in electric utilities and grid operators. These devices manage critical grid settings, protection coordination, and power flow monitoring. Organizations operating these devices in versions before 3.10 should prioritize patching.

An attacker would send a malicious link to a logged-in operator of a SICAM P850 or P855 device. By exploiting session fixation, the attacker could take over the operator's authenticated session and use parameter parsing vulnerabilities in the web server to execute arbitrary code on the device with the privileges of that operator.