cnvd - cnvd-2022-36389

cnvd-2022-36389

Vulnerability from cnvd

Title: Siemens SICAM P850和SICAM P855 Devices跨站脚本漏洞（CNVD-2022-36389）

Description:

SICAM P850多功能测量装置用于采集、可视化、评估和传输电气测量变量，如交流电、交流电压、频率、功率、谐波等。SICAM P855多功能设备用于收集、显示和传输测量的电气变量，如交流电流、交流电压、功率类型、谐波等。根据电能质量标准IEC 61000-4-30收集和处理测量值和事件。

Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响的设备无法正确处理上载的文件，攻击者可利用漏洞存储XSS攻击，当合法用户访问错误日志时，XSS攻击可以以用户的名义执行任意操作。

Severity: 高

Patch Name: Siemens SICAM P850和SICAM P855 Devices跨站脚本漏洞（CNVD-2022-36389）的补丁

Patch Description:

Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响的设备无法正确处理上载的文件，攻击者可利用漏洞存储XSS攻击，当合法用户访问错误日志时，XSS攻击可以以用户的名义执行任意操作。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-165073.html

Reference: https://cert-portal.siemens.com/productcert/html/ssa-165073.html

Impacted products

Name
['Siemens SICAM P850 (7KG8500-0AA00-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA00-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-2AA0) < V3.00']

Name

['Siemens SICAM P850 (7KG8500-0AA00-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA00-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-2AA0) < V3.00']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-29882"
    }
  },
  "description": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\n\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u4e0a\u8f7d\u7684\u6587\u4ef6\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5b58\u50a8XSS\u653b\u51fb\uff0c\u5f53\u5408\u6cd5\u7528\u6237\u8bbf\u95ee\u9519\u8bef\u65e5\u5fd7\u65f6\uff0cXSS\u653b\u51fb\u53ef\u4ee5\u4ee5\u7528\u6237\u7684\u540d\u4e49\u6267\u884c\u4efb\u610f\u64cd\u4f5c\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-165073.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-36389",
  "openTime": "2022-05-11",
  "patchDescription": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\r\n\r\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u4e0a\u8f7d\u7684\u6587\u4ef6\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u5b58\u50a8XSS\u653b\u51fb\uff0c\u5f53\u5408\u6cd5\u7528\u6237\u8bbf\u95ee\u9519\u8bef\u65e5\u5fd7\u65f6\uff0cXSS\u653b\u51fb\u53ef\u4ee5\u4ee5\u7528\u6237\u7684\u540d\u4e49\u6267\u884c\u4efb\u610f\u64cd\u4f5c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SICAM P850\u548cSICAM P855 Devices\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2022-36389\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SICAM P850 (7KG8500-0AA00-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8500-0AA00-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8500-0AA10-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8500-0AA10-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8500-0AA30-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8500-0AA30-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA01-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA01-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA02-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA02-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA11-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA11-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA12-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA12-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA31-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA31-2AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA32-0AA0) \u003c V3.00",
      "Siemens SICAM P850 (7KG8501-0AA32-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA00-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA00-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA10-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA10-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA30-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8550-0AA30-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA01-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA01-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA02-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA02-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA11-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA11-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA12-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA12-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA31-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA31-2AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA32-0AA0) \u003c V3.00",
      "Siemens SICAM P855 (7KG8551-0AA32-2AA0) \u003c V3.00"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-05-11",
  "title": "Siemens SICAM P850\u548cSICAM P855 Devices\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2022-36389\uff09"
}

CVE-2022-29882 (GCVE-0-2022-29882)

Vulnerability from cvelistv5

Published

2022-05-10 09:47

Modified

2024-08-03 06:33

Severity ?

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Summary

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

Siemens

SICAM P850

Version: All versions < V3.00

Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P850	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00
Siemens	SICAM P855	Version: All versions < V3.00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:33:43.184Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        },
        {
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.00"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-10T09:47:28",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-29882",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P850",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SICAM P855",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.00"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-29882",
    "datePublished": "2022-05-10T09:47:28",
    "dateReserved": "2022-04-28T00:00:00",
    "dateUpdated": "2024-08-03T06:33:43.184Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted