Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-29876 (GCVE-0-2022-29876)
Vulnerability from cvelistv5 – Published: 2022-05-10 09:47 – Updated: 2025-12-09 10:36
VLAI
EPSS
Summary
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.
Severity
7.1 (High)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
3 references
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:33:42.955Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "SICAM T",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V3.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-09T10:36:29.341Z",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-471761.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2022-29876",
"datePublished": "2022-05-10T09:47:19.000Z",
"dateReserved": "2022-04-28T00:00:00.000Z",
"dateUpdated": "2025-12-09T10:36:29.341Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-29876",
"date": "2026-06-04",
"epss": "0.00654",
"percentile": "0.71319"
},
"fkie_nvd": {
"configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"29D23CC1-B5EA-4088-8552-6BD00DE6DABC\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"19E9E75A-266E-42F4-A978-1881CFB775D5\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB0B7A11-AE03-4EDD-B446-CFAE7B83A405\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"B4676DE8-BCA3-48AF-B90F-6F4331FDD77B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97E8F3D9-37A0-4DFD-8131-1664893C2D64\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"98F64393-39B7-49DE-8F50-73E7A5DBAB61\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5450BA3D-61FE-46EA-AD56-D04D3809D23D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"A5665988-B892-4C16-837A-DA5D1A1FD241\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CE1C19C0-3092-4AB8-A131-3284D3CF0A00\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"50A41D5D-D9CE-4436-92E1-87DFE46E703A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8EC17FD2-8B3B-4331-A0E2-991A0C92E119\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F555FCD5-A377-4505-9EB9-83D1FC0BA005\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AFAA2339-0C00-4551-958E-76E34DF50F3E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"209B2BF5-0023-4F35-9E1A-5F271A026FA1\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC103BEB-FD72-4BCF-8450-8F753986284E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"81CA2D85-1A58-42FB-BD06-F2E236808890\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"94BB09DC-2493-4680-A718-847A9F3916C0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"0D62E4F9-7230-496D-A00A-AB71EC9F56B6\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83646A62-58E8-47B3-A3E2-9052A223BA3A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"835E6B3A-D357-478D-AC74-1FB0BF1FB48B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"48DA971B-28EA-4443-B546-CE066DE5A611\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC8905ED-8C17-42A3-BB22-95F572A2CD41\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"90528A32-4827-4A29-8E54-0DBCEF141183\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"513D4A78-6F4B-421F-BA56-40FF32E12692\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"6BECCF69-B791-4F97-94B6-150A52A22543\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"81A0038B-F453-4530-A681-F37AADF797A2\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F8D9B433-4F5F-4C63-B16C-047186B726F5\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"624701F6-0F97-4A83-A329-38310EA7ABAE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"93845620-72CC-4C54-BF5C-9E9A9DD0439F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B81F629C-DF39-43F0-AEB9-F66CFCB29E85\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"5178FF49-6E30-47D7-892F-1121288E7E8B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6ED2A92F-04A9-46BC-B334-DB06F55614A7\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F7E21CE9-87D8-4D20-B343-48AF64E7049D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D80D60C5-AF37-4498-919E-CB6589286B3C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D3C6DE9-9980-46E6-9468-F8167D5CF692\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"8B02F4EC-85D5-442E-B71C-A9CA9C3854F6\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C94271C-DAD2-4C53-A701-93A542A3B154\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"4E24F48D-DC93-4126-8830-A7662AAA87CD\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"63C21B33-EC43-450A-8F33-0948DD07525B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4AF24A81-2063-4DAB-B6E4-2546042A553C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"A402337A-B4A8-4F8D-B826-2EE714864C01\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15554D33-7C32-44E6-B16E-D0A5AC903E85\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"F6FE0DFE-B877-4E07-9A9C-8AC24259240F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"34B32039-505A-4815-967B-D11F4D337CE0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"1DCF2749-986F-4735-96E8-749E625CAD6A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9E74BAD6-218E-477C-B2C2-CE0E578A2400\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"E7558F27-235F-47B8-9D65-944BF1C92DDF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CE65771-9A0E-48AF-A9FE-4705698C8997\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"AEB551BB-4C46-4FA0-B9EF-C70583D02993\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9710DFFE-974F-4A82-9E85-3311D84A951F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DF385121-4F72-4EE3-9EC3-BC9B910E74BD\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71F882A2-DFFB-4A07-8F62-E52068EDCC35\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"83A63834-D7F7-4112-9C03-AF64EA254B35\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B93C0DE4-4FE9-4C19-AD4A-805910DD9682\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"9C9F3057-5918-4331-863A-46A4FA292F8E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"949B5448-5CCA-45A4-8D6B-8FB70EF42A14\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"EFFF3159-7FCF-4ACC-B06A-EB6414E01307\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"634DEE3C-5BB9-446B-A0FD-95764C0B0461\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"BC81665F-2064-4F85-88BF-5A3F46178CBE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"468D2956-6D5C-48C6-B0C9-868CC9DEA8D9\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"274D904F-D09A-4038-97FE-464BBE97A93B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"976E3302-C339-4057-A0DD-EF40A9A501F4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7923FD73-F2FA-4B60-A1E3-F7C4D586269B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.00\", \"matchCriteriaId\": \"3A4EF031-920F-4F69-B25A-779ACA4046B8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D72FBA5B-E455-4E07-B39C-70AEE0C26EBF\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). Los dispositivos afectados no manejan correctamente la entrada de un par\\u00e1metro de petici\\u00f3n GET. El argumento proporcionado es reflejado directamente en la respuesta del servidor web. Esto podr\\u00eda permitir a un atacante no autenticado llevar a cabo ataques de tipo XSS reflejados\"}]",
"id": "CVE-2022-29876",
"lastModified": "2024-11-21T06:59:52.710",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.7}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2022-05-20T13:15:16.083",
"references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\", \"source\": \"productcert@siemens.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-29876\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-05-20T13:15:16.083\",\"lastModified\":\"2025-12-09T16:17:13.573\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). Los dispositivos afectados no manejan correctamente la entrada de un par\u00e1metro de petici\u00f3n GET. El argumento proporcionado es reflejado directamente en la respuesta del servidor web. Esto podr\u00eda permitir a un atacante no autenticado llevar a cabo ataques de tipo XSS reflejados\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":3.7},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"29D23CC1-B5EA-4088-8552-6BD00DE6DABC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19E9E75A-266E-42F4-A978-1881CFB775D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0B7A11-AE03-4EDD-B446-CFAE7B83A405\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B4676DE8-BCA3-48AF-B90F-6F4331FDD77B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97E8F3D9-37A0-4DFD-8131-1664893C2D64\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"98F64393-39B7-49DE-8F50-73E7A5DBAB61\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5450BA3D-61FE-46EA-AD56-D04D3809D23D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A5665988-B892-4C16-837A-DA5D1A1FD241\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE1C19C0-3092-4AB8-A131-3284D3CF0A00\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"50A41D5D-D9CE-4436-92E1-87DFE46E703A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EC17FD2-8B3B-4331-A0E2-991A0C92E119\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F555FCD5-A377-4505-9EB9-83D1FC0BA005\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFAA2339-0C00-4551-958E-76E34DF50F3E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"209B2BF5-0023-4F35-9E1A-5F271A026FA1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC103BEB-FD72-4BCF-8450-8F753986284E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"81CA2D85-1A58-42FB-BD06-F2E236808890\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94BB09DC-2493-4680-A718-847A9F3916C0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"0D62E4F9-7230-496D-A00A-AB71EC9F56B6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83646A62-58E8-47B3-A3E2-9052A223BA3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"835E6B3A-D357-478D-AC74-1FB0BF1FB48B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"48DA971B-28EA-4443-B546-CE066DE5A611\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8905ED-8C17-42A3-BB22-95F572A2CD41\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"90528A32-4827-4A29-8E54-0DBCEF141183\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"513D4A78-6F4B-421F-BA56-40FF32E12692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"6BECCF69-B791-4F97-94B6-150A52A22543\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A0038B-F453-4530-A681-F37AADF797A2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F8D9B433-4F5F-4C63-B16C-047186B726F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"624701F6-0F97-4A83-A329-38310EA7ABAE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"93845620-72CC-4C54-BF5C-9E9A9DD0439F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B81F629C-DF39-43F0-AEB9-F66CFCB29E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"5178FF49-6E30-47D7-892F-1121288E7E8B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ED2A92F-04A9-46BC-B334-DB06F55614A7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F7E21CE9-87D8-4D20-B343-48AF64E7049D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D80D60C5-AF37-4498-919E-CB6589286B3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D3C6DE9-9980-46E6-9468-F8167D5CF692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"8B02F4EC-85D5-442E-B71C-A9CA9C3854F6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C94271C-DAD2-4C53-A701-93A542A3B154\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"4E24F48D-DC93-4126-8830-A7662AAA87CD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"63C21B33-EC43-450A-8F33-0948DD07525B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF24A81-2063-4DAB-B6E4-2546042A553C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A402337A-B4A8-4F8D-B826-2EE714864C01\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15554D33-7C32-44E6-B16E-D0A5AC903E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F6FE0DFE-B877-4E07-9A9C-8AC24259240F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34B32039-505A-4815-967B-D11F4D337CE0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"1DCF2749-986F-4735-96E8-749E625CAD6A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E74BAD6-218E-477C-B2C2-CE0E578A2400\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"E7558F27-235F-47B8-9D65-944BF1C92DDF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CE65771-9A0E-48AF-A9FE-4705698C8997\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"AEB551BB-4C46-4FA0-B9EF-C70583D02993\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9710DFFE-974F-4A82-9E85-3311D84A951F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF385121-4F72-4EE3-9EC3-BC9B910E74BD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71F882A2-DFFB-4A07-8F62-E52068EDCC35\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"83A63834-D7F7-4112-9C03-AF64EA254B35\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B93C0DE4-4FE9-4C19-AD4A-805910DD9682\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9C9F3057-5918-4331-863A-46A4FA292F8E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"949B5448-5CCA-45A4-8D6B-8FB70EF42A14\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"EFFF3159-7FCF-4ACC-B06A-EB6414E01307\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634DEE3C-5BB9-446B-A0FD-95764C0B0461\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"BC81665F-2064-4F85-88BF-5A3F46178CBE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"468D2956-6D5C-48C6-B0C9-868CC9DEA8D9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"274D904F-D09A-4038-97FE-464BBE97A93B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"976E3302-C339-4057-A0DD-EF40A9A501F4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7923FD73-F2FA-4B60-A1E3-F7C4D586269B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3A4EF031-920F-4F69-B25A-779ACA4046B8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D72FBA5B-E455-4E07-B39C-70AEE0C26EBF\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-165073.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-471761.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
SSA-165073
Vulnerability from csaf_siemens - Published: 2022-05-10 00:00 - Updated: 2022-05-10 00:00Summary
SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices
Notes
Summary: Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations: Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
CWE-141
- Improper Neutralization of Parameter/Argument Delimiters
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
9.8 (Critical)
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-319
- Cleartext Transmission of Sensitive Information
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-79
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-294
- Authentication Bypass by Capture-replay
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-79
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-306
- Missing Authentication for Critical Function
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-79
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
CWE-287
- Improper Authentication
Affected products
Known affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8500-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P850
Siemens / SICAM P850
|
7KG8501-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA00-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA10-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8550-0AA30-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA01-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA02-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA11-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA12-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA31-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-0AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
|
SICAM P855
Siemens / SICAM P855
|
7KG8551-0AA32-2AA0
|
< V3.00 |
Vendor Fix
fix
Mitigation
|
References
36 references
Acknowledgments
Siemens Energy
Michael Messner
{
"document": {
"acknowledgments": [
{
"names": [
"Michael Messner"
],
"organization": "Siemens Energy",
"summary": "reporting the vulnerabilities"
}
],
"category": "Siemens Security Advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited.",
"tlp": {
"label": "WHITE"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-165073.txt"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-165073.json"
}
],
"title": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices",
"tracking": {
"current_release_date": "2022-05-10T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-165073",
"initial_release_date": "2022-05-10T00:00:00Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "2",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "4",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "5",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "6",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "7",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "8",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "9",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "10",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "11",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "12",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "13",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "14",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "15",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "16",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "17",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P850",
"product_id": "18",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "19",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "20",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "21",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "22",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "23",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "24",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "25",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "26",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "27",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "28",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "29",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "30",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "31",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "32",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "33",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "34",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "35",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c V3.00",
"product": {
"name": "SICAM P855",
"product_id": "36",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29872.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29873.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29874.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29876.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29877",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29877.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29877"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29878.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29879.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29880.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29881.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29882.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
},
"references": [
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29883.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"6",
"7",
"8",
"9",
"10",
"11",
"12",
"13",
"14",
"15",
"16",
"17",
"18",
"19",
"20",
"21",
"22",
"23",
"24",
"25",
"26",
"27",
"28",
"29",
"30",
"31",
"32",
"33",
"34",
"35",
"36"
]
}
],
"title": "CVE-2022-29883"
}
]
}
SSA-471761
Vulnerability from csaf_siemens - Published: 2025-12-09 00:00 - Updated: 2025-12-09 00:00Summary
SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0
Notes
Summary: SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user.
Siemens has released a new version for SICAM T and recommends to update to the latest version.
General Recommendations: Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
References
2 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user.\n\nSiemens has released a new version for SICAM T and recommends to update to the latest version.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. \nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-471761.html"
},
{
"category": "self",
"summary": "SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-471761.json"
}
],
"title": "SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0",
"tracking": {
"current_release_date": "2025-12-09T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-471761",
"initial_release_date": "2025-12-09T00:00:00Z",
"revision_history": [
{
"date": "2025-12-09T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "interim",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.0",
"product": {
"name": "SICAM T",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SICAM T"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-29883"
},
{
"cve": "CVE-2022-40226",
"cwe": {
"id": "CWE-384",
"name": "Session Fixation"
},
"notes": [
{
"category": "summary",
"text": "Affected devices accept user defined session cookies and do not renew the session cookie after login/logout. This could allow an attacker to take over another user\u0027s session after login.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-40226"
},
{
"cve": "CVE-2022-41665",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate the parameter of a specific GET request. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-41665"
},
{
"cve": "CVE-2022-43439",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate the Language-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-43439"
},
{
"cve": "CVE-2023-30901",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"notes": [
{
"category": "summary",
"text": "The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-30901"
},
{
"cve": "CVE-2023-31238",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "summary",
"text": "Affected devices are missing cookie protection flags when using the default settings. An attacker who gains access to a session token can use it to impersonate a legitimate application user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM T",
"product_ids": [
"1"
]
},
{
"category": "mitigation",
"details": "Restrict access to port 443/tcp to trusted IP addresses only.",
"product_ids": [
"1"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743625/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-31238"
}
]
}
VAR-202205-0929
Vulnerability from variot - Updated: 2023-12-18 11:56A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30. Siemens SICAM P850 and SICAM P855
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202205-0929",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sicam p850",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "sicam p855",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "7kg8500-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "NVD",
"id": "CVE-2022-29876"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2022-29876"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Michael Messner from Siemens Energy reported these vulnerabilities to Siemens.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
],
"trust": 0.6
},
"cve": "CVE-2022-29876",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2022-36395",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 2.8,
"impactScore": 2.7,
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2022-29876",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CNVD",
"id": "CNVD-2022-36395",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202205-3128",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30. Siemens SICAM P850 and SICAM P855",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "VULMON",
"id": "CVE-2022-29876"
}
],
"trust": 1.53
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-29876",
"trust": 2.3
},
{
"db": "SIEMENS",
"id": "SSA-165073",
"trust": 2.2
},
{
"db": "ICS CERT",
"id": "ICSA-22-132-07",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2022-36395",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.2357",
"trust": 0.6
},
{
"db": "CS-HELP",
"id": "SB2022051724",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2022-29876",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "VULMON",
"id": "CVE-2022-29876"
},
{
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"id": "VAR-202205-0929",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
}
]
},
"last_update_date": "2023-12-18T11:56:06.500000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Patch for Siemens SICAM P850 and SICAM P855 Devices Cross-Site Scripting Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/332531"
},
{
"title": "Siemens SICAM Fixes for cross-site scripting vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=194233"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2022-29876"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"trust": 0.6,
"url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
},
{
"trust": 0.6,
"url": "https://www.cybersecurity-help.cz/vdb/sb2022051724"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-29876/"
},
{
"trust": 0.6,
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-132-07"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.2357"
},
{
"trust": 0.1,
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-07"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "VULMON",
"id": "CVE-2022-29876"
},
{
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"db": "VULMON",
"id": "CVE-2022-29876"
},
{
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"date": "2022-05-20T13:15:16.083000",
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"date": "2022-05-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36395"
},
{
"date": "2022-05-26T20:44:10.247000",
"db": "NVD",
"id": "CVE-2022-29876"
},
{
"date": "2022-05-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SICAM P850 and SICAM P855 Devices Cross-Site Scripting Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36395"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3128"
}
],
"trust": 0.6
}
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…