CVEvulnerability

CVE-2022-29879

5.3 MEDIUM Published 2022-05-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-306

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.

Affected configurations

• siemens 7kg8500-0aa00-0aa0 firmware (< 3.00) • siemens 7kg8500-0aa00-2aa0 firmware (< 3.00) • siemens 7kg8500-0aa10-0aa0 firmware (< 3.00) • siemens 7kg8500-0aa10-2aa0 firmware (< 3.00) • siemens 7kg8500-0aa30-0aa0 firmware (< 3.00) • siemens 7kg8500-0aa30-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa01-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa01-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa02-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa02-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa11-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa11-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa12-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa12-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa31-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa31-2aa0 firmware (< 3.00) • siemens 7kg8501-0aa32-0aa0 firmware (< 3.00) • siemens 7kg8501-0aa32-2aa0 firmware (< 3.00) • siemens 7kg8550-0aa00-0aa0 firmware (< 3.00) • siemens 7kg8550-0aa00-2aa0 firmware (< 3.00) • siemens 7kg8550-0aa10-0aa0 firmware (< 3.00) • siemens 7kg8550-0aa10-2aa0 firmware (< 3.00) • siemens 7kg8550-0aa30-0aa0 firmware (< 3.00) • siemens 7kg8550-0aa30-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa01-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa01-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa02-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa02-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa11-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa11-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa12-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa12-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa31-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa31-2aa0 firmware (< 3.00) • siemens 7kg8551-0aa32-0aa0 firmware (< 3.00) • siemens 7kg8551-0aa32-2aa0 firmware (< 3.00)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References