Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-29879 (GCVE-0-2022-29879)
Vulnerability from cvelistv5
Published
2022-05-10 09:47
Modified
2024-08-03 06:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-306 - Missing Authentication for Critical Function
Summary
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory |
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Siemens | SICAM P850 |
Version: All versions < V3.00 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:33:43.279Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-10T09:47:23",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306: Missing Authentication for Critical Function"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2022-29879",
"datePublished": "2022-05-10T09:47:23",
"dateReserved": "2022-04-28T00:00:00",
"dateUpdated": "2024-08-03T06:33:43.279Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-29879\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-05-20T13:15:16.227\",\"lastModified\":\"2024-11-21T06:59:53.297\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). La interfaz de administraci\u00f3n basada en la web de los dispositivos afectados no emplea una protecci\u00f3n de acceso especial para determinadas visualizaciones internas del desarrollador. Esto podr\u00eda permitir a los usuarios autenticados acceder a informaci\u00f3n cr\u00edtica del dispositivo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"29D23CC1-B5EA-4088-8552-6BD00DE6DABC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19E9E75A-266E-42F4-A978-1881CFB775D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0B7A11-AE03-4EDD-B446-CFAE7B83A405\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B4676DE8-BCA3-48AF-B90F-6F4331FDD77B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97E8F3D9-37A0-4DFD-8131-1664893C2D64\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"98F64393-39B7-49DE-8F50-73E7A5DBAB61\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5450BA3D-61FE-46EA-AD56-D04D3809D23D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A5665988-B892-4C16-837A-DA5D1A1FD241\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE1C19C0-3092-4AB8-A131-3284D3CF0A00\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"50A41D5D-D9CE-4436-92E1-87DFE46E703A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EC17FD2-8B3B-4331-A0E2-991A0C92E119\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F555FCD5-A377-4505-9EB9-83D1FC0BA005\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFAA2339-0C00-4551-958E-76E34DF50F3E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"209B2BF5-0023-4F35-9E1A-5F271A026FA1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC103BEB-FD72-4BCF-8450-8F753986284E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"81CA2D85-1A58-42FB-BD06-F2E236808890\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94BB09DC-2493-4680-A718-847A9F3916C0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"0D62E4F9-7230-496D-A00A-AB71EC9F56B6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83646A62-58E8-47B3-A3E2-9052A223BA3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"835E6B3A-D357-478D-AC74-1FB0BF1FB48B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"48DA971B-28EA-4443-B546-CE066DE5A611\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8905ED-8C17-42A3-BB22-95F572A2CD41\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"90528A32-4827-4A29-8E54-0DBCEF141183\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"513D4A78-6F4B-421F-BA56-40FF32E12692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"6BECCF69-B791-4F97-94B6-150A52A22543\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A0038B-F453-4530-A681-F37AADF797A2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F8D9B433-4F5F-4C63-B16C-047186B726F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"624701F6-0F97-4A83-A329-38310EA7ABAE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"93845620-72CC-4C54-BF5C-9E9A9DD0439F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B81F629C-DF39-43F0-AEB9-F66CFCB29E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"5178FF49-6E30-47D7-892F-1121288E7E8B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ED2A92F-04A9-46BC-B334-DB06F55614A7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F7E21CE9-87D8-4D20-B343-48AF64E7049D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D80D60C5-AF37-4498-919E-CB6589286B3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D3C6DE9-9980-46E6-9468-F8167D5CF692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"8B02F4EC-85D5-442E-B71C-A9CA9C3854F6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C94271C-DAD2-4C53-A701-93A542A3B154\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"4E24F48D-DC93-4126-8830-A7662AAA87CD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"63C21B33-EC43-450A-8F33-0948DD07525B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF24A81-2063-4DAB-B6E4-2546042A553C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A402337A-B4A8-4F8D-B826-2EE714864C01\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15554D33-7C32-44E6-B16E-D0A5AC903E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F6FE0DFE-B877-4E07-9A9C-8AC24259240F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34B32039-505A-4815-967B-D11F4D337CE0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"1DCF2749-986F-4735-96E8-749E625CAD6A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E74BAD6-218E-477C-B2C2-CE0E578A2400\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"E7558F27-235F-47B8-9D65-944BF1C92DDF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CE65771-9A0E-48AF-A9FE-4705698C8997\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"AEB551BB-4C46-4FA0-B9EF-C70583D02993\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9710DFFE-974F-4A82-9E85-3311D84A951F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF385121-4F72-4EE3-9EC3-BC9B910E74BD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71F882A2-DFFB-4A07-8F62-E52068EDCC35\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"83A63834-D7F7-4112-9C03-AF64EA254B35\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B93C0DE4-4FE9-4C19-AD4A-805910DD9682\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9C9F3057-5918-4331-863A-46A4FA292F8E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"949B5448-5CCA-45A4-8D6B-8FB70EF42A14\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"EFFF3159-7FCF-4ACC-B06A-EB6414E01307\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634DEE3C-5BB9-446B-A0FD-95764C0B0461\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"BC81665F-2064-4F85-88BF-5A3F46178CBE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"468D2956-6D5C-48C6-B0C9-868CC9DEA8D9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"274D904F-D09A-4038-97FE-464BBE97A93B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"976E3302-C339-4057-A0DD-EF40A9A501F4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7923FD73-F2FA-4B60-A1E3-F7C4D586269B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3A4EF031-920F-4F69-B25A-779ACA4046B8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D72FBA5B-E455-4E07-B39C-70AEE0C26EBF\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
cnvd-2022-36392
Vulnerability from cnvd
Title: Siemens SICAM P850和SICAM P855 Devices身份验证漏洞（CNVD-2022-36392）
Description:
SICAM P850多功能测量装置用于采集、可视化、评估和传输电气测量变量，如交流电、交流电压、频率、功率、谐波等。SICAM P855多功能设备用于收集、显示和传输测量的电气变量，如交流电流、交流电压、功率类型、谐波等。根据电能质量标准IEC 61000-4-30收集和处理测量值和事件。
Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响设备基于web管理界面不会对某些内部开发人员视图采用特殊的访问保护，攻击者可利用漏洞经过身份验证的用户访问关键设备信息。
Severity: 中
Patch Name: Siemens SICAM P850和SICAM P855 Devices身份验证漏洞（CNVD-2022-36392）的补丁
Patch Description:
SICAM P850多功能测量装置用于采集、可视化、评估和传输电气测量变量，如交流电、交流电压、频率、功率、谐波等。SICAM P855多功能设备用于收集、显示和传输测量的电气变量，如交流电流、交流电压、功率类型、谐波等。根据电能质量标准IEC 61000-4-30收集和处理测量值和事件。
Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响设备基于web管理界面不会对某些内部开发人员视图采用特殊的访问保护，攻击者可利用漏洞经过身份验证的用户访问关键设备信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-165073.html
Reference: https://cert-portal.siemens.com/productcert/html/ssa-165073.html
Impacted products
| Name | ['Siemens SICAM P850 (7KG8500-0AA00-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA00-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-2AA0) < V3.00'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2022-29879"
}
},
"description": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\n\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u57fa\u4e8eweb\u7ba1\u7406\u754c\u9762\u4e0d\u4f1a\u5bf9\u67d0\u4e9b\u5185\u90e8\u5f00\u53d1\u4eba\u5458\u89c6\u56fe\u91c7\u7528\u7279\u6b8a\u7684\u8bbf\u95ee\u4fdd\u62a4\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u8bbf\u95ee\u5173\u952e\u8bbe\u5907\u4fe1\u606f\u3002",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-165073.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2022-36392",
"openTime": "2022-05-11",
"patchDescription": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\r\n\r\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u57fa\u4e8eweb\u7ba1\u7406\u754c\u9762\u4e0d\u4f1a\u5bf9\u67d0\u4e9b\u5185\u90e8\u5f00\u53d1\u4eba\u5458\u89c6\u56fe\u91c7\u7528\u7279\u6b8a\u7684\u8bbf\u95ee\u4fdd\u62a4\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u8bbf\u95ee\u5173\u952e\u8bbe\u5907\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Siemens SICAM P850\u548cSICAM P855 Devices\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2022-36392\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Siemens SICAM P850 (7KG8500-0AA00-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA00-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA10-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA10-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA30-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA30-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA01-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA01-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA02-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA02-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA11-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA11-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA12-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA12-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA31-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA31-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA32-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA32-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA00-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA00-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA10-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA10-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA30-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA30-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA01-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA01-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA02-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA02-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA11-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA11-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA12-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA12-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA31-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA31-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA32-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA32-2AA0) \u003c V3.00"
]
},
"referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html",
"serverity": "\u4e2d",
"submitTime": "2022-05-11",
"title": "Siemens SICAM P850\u548cSICAM P855 Devices\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2022-36392\uff09"
}
gsd-2022-29879
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-29879",
"description": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GSD-2022-29879"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-29879"
],
"details": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GSD-2022-29879",
"modified": "2023-12-13T01:19:42.428571Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306: Missing Authentication for Critical Function"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "N/A",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-06-02T14:03Z",
"publishedDate": "2022-05-20T13:15Z"
}
}
}
icsa-22-132-07
Vulnerability from csaf_cisa
Published
2022-05-10 00:00
Modified
2025-05-06 06:00
Summary
Siemens SICAM P850 and SICAM P855
Notes
Summary
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting this vulnerability to CISA."
},
{
"names": [
"Michael Messner"
],
"organization": "Siemens Energy",
"summary": "reporting the vulnerabilities"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-165073.json"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-165073.txt"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-07.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SICAM P850 and SICAM P855",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-132-07",
"initial_release_date": "2022-05-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0022",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29872.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29873.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29874.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29876.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29877",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29877.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29877"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29878.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29879.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29880.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29881.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29882.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29883.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29883"
}
]
}
ICSA-22-132-07
Vulnerability from csaf_cisa
Published
2022-05-10 00:00
Modified
2025-05-06 06:00
Summary
Siemens SICAM P850 and SICAM P855
Notes
Summary
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting this vulnerability to CISA."
},
{
"names": [
"Michael Messner"
],
"organization": "Siemens Energy",
"summary": "reporting the vulnerabilities"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-165073.json"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-165073.txt"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-07.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SICAM P850 and SICAM P855",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-132-07",
"initial_release_date": "2022-05-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0022",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29872.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29873.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29874.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29876.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29877",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29877.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29877"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29878.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29879.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29880.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29881.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29882.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29883.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29883"
}
]
}
fkie_cve-2022-29879
Vulnerability from fkie_nvd
Published
2022-05-20 13:15
Modified
2024-11-21 06:59
Severity ?
Summary
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "29D23CC1-B5EA-4088-8552-6BD00DE6DABC",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19E9E75A-266E-42F4-A978-1881CFB775D5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0B7A11-AE03-4EDD-B446-CFAE7B83A405",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B4676DE8-BCA3-48AF-B90F-6F4331FDD77B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "97E8F3D9-37A0-4DFD-8131-1664893C2D64",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "98F64393-39B7-49DE-8F50-73E7A5DBAB61",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5450BA3D-61FE-46EA-AD56-D04D3809D23D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A5665988-B892-4C16-837A-DA5D1A1FD241",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE1C19C0-3092-4AB8-A131-3284D3CF0A00",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "50A41D5D-D9CE-4436-92E1-87DFE46E703A",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8EC17FD2-8B3B-4331-A0E2-991A0C92E119",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F555FCD5-A377-4505-9EB9-83D1FC0BA005",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AFAA2339-0C00-4551-958E-76E34DF50F3E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "209B2BF5-0023-4F35-9E1A-5F271A026FA1",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC103BEB-FD72-4BCF-8450-8F753986284E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "81CA2D85-1A58-42FB-BD06-F2E236808890",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "94BB09DC-2493-4680-A718-847A9F3916C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0D62E4F9-7230-496D-A00A-AB71EC9F56B6",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83646A62-58E8-47B3-A3E2-9052A223BA3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "835E6B3A-D357-478D-AC74-1FB0BF1FB48B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "48DA971B-28EA-4443-B546-CE066DE5A611",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC8905ED-8C17-42A3-BB22-95F572A2CD41",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90528A32-4827-4A29-8E54-0DBCEF141183",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "513D4A78-6F4B-421F-BA56-40FF32E12692",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6BECCF69-B791-4F97-94B6-150A52A22543",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "81A0038B-F453-4530-A681-F37AADF797A2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F8D9B433-4F5F-4C63-B16C-047186B726F5",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "624701F6-0F97-4A83-A329-38310EA7ABAE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "93845620-72CC-4C54-BF5C-9E9A9DD0439F",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B81F629C-DF39-43F0-AEB9-F66CFCB29E85",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5178FF49-6E30-47D7-892F-1121288E7E8B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6ED2A92F-04A9-46BC-B334-DB06F55614A7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F7E21CE9-87D8-4D20-B343-48AF64E7049D",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D80D60C5-AF37-4498-919E-CB6589286B3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D3C6DE9-9980-46E6-9468-F8167D5CF692",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8B02F4EC-85D5-442E-B71C-A9CA9C3854F6",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9C94271C-DAD2-4C53-A701-93A542A3B154",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4E24F48D-DC93-4126-8830-A7662AAA87CD",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "63C21B33-EC43-450A-8F33-0948DD07525B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4AF24A81-2063-4DAB-B6E4-2546042A553C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A402337A-B4A8-4F8D-B826-2EE714864C01",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "15554D33-7C32-44E6-B16E-D0A5AC903E85",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F6FE0DFE-B877-4E07-9A9C-8AC24259240F",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34B32039-505A-4815-967B-D11F4D337CE0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1DCF2749-986F-4735-96E8-749E625CAD6A",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9E74BAD6-218E-477C-B2C2-CE0E578A2400",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E7558F27-235F-47B8-9D65-944BF1C92DDF",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0CE65771-9A0E-48AF-A9FE-4705698C8997",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AEB551BB-4C46-4FA0-B9EF-C70583D02993",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9710DFFE-974F-4A82-9E85-3311D84A951F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF385121-4F72-4EE3-9EC3-BC9B910E74BD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "71F882A2-DFFB-4A07-8F62-E52068EDCC35",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "83A63834-D7F7-4112-9C03-AF64EA254B35",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B93C0DE4-4FE9-4C19-AD4A-805910DD9682",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C9F3057-5918-4331-863A-46A4FA292F8E",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "949B5448-5CCA-45A4-8D6B-8FB70EF42A14",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EFFF3159-7FCF-4ACC-B06A-EB6414E01307",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "634DEE3C-5BB9-446B-A0FD-95764C0B0461",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BC81665F-2064-4F85-88BF-5A3F46178CBE",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "468D2956-6D5C-48C6-B0C9-868CC9DEA8D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "274D904F-D09A-4038-97FE-464BBE97A93B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "976E3302-C339-4057-A0DD-EF40A9A501F4",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7923FD73-F2FA-4B60-A1E3-F7C4D586269B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4EF031-920F-4F69-B25A-779ACA4046B8",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D72FBA5B-E455-4E07-B39C-70AEE0C26EBF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). La interfaz de administraci\u00f3n basada en la web de los dispositivos afectados no emplea una protecci\u00f3n de acceso especial para determinadas visualizaciones internas del desarrollador. Esto podr\u00eda permitir a los usuarios autenticados acceder a informaci\u00f3n cr\u00edtica del dispositivo"
}
],
"id": "CVE-2022-29879",
"lastModified": "2024-11-21T06:59:53.297",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-05-20T13:15:16.227",
"references": [
{
"source": "productcert@siemens.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "productcert@siemens.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
ghsa-7gjg-3mrx-xxf9
Vulnerability from github
Published
2022-05-21 00:01
Modified
2022-06-03 00:01
Severity ?
VLAI Severity ?
Details
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
{
"affected": [],
"aliases": [
"CVE-2022-29879"
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-05-20T13:15:00Z",
"severity": "MODERATE"
},
"details": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GHSA-7gjg-3mrx-xxf9",
"modified": "2022-06-03T00:01:47Z",
"published": "2022-05-21T00:01:06Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29879"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
var-202205-0922
Vulnerability from variot
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information. 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware, 7kg8500-0aa10-0aa0 Multiple Siemens products, such as firmware, are vulnerable to lack of authentication for critical functions.Information may be obtained. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30.
A security vulnerability exists in Siemens SICAM P850 and SICAM P855 Devices. Siemens SICAM P850 and SICAM P855
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202205-0922",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sicam p850",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "sicam p855",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "7kg8551-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa02-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa12-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa00-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa10-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa02-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa32-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8550-0aa00-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa01-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa10-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa11-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa31-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa00-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa12-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8550-0aa00-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa11-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa31-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa30-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa30-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa01-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Michael Messner from Siemens Energy reported these vulnerabilities to Siemens.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
},
"cve": "CVE-2022-29879",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CVE-2022-29879",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2022-36392",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2022-29879",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2022-29879",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2022-29879",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2022-29879",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2022-36392",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202205-3125",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information. 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware, 7kg8500-0aa10-0aa0 Multiple Siemens products, such as firmware, are vulnerable to lack of authentication for critical functions.Information may be obtained. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30. \n\r\n\r\nA security vulnerability exists in Siemens SICAM P850 and SICAM P855 Devices. Siemens SICAM P850 and SICAM P855",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-29879",
"trust": 3.9
},
{
"db": "SIEMENS",
"id": "SSA-165073",
"trust": 3.0
},
{
"db": "ICS CERT",
"id": "ICSA-22-132-07",
"trust": 1.5
},
{
"db": "JVN",
"id": "JVNVU92977068",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2022-36392",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.2357",
"trust": 0.6
},
{
"db": "CS-HELP",
"id": "SB2022051724",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2022-29879",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"id": "VAR-202205-0922",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
}
]
},
"last_update_date": "2024-11-23T21:50:30.068000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Patch for Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability (CNVD-2022-36392)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/332556"
},
{
"title": "Siemens SICAM Fixes for access control error vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=194649"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.0
},
{
"problemtype": "Lack of authentication for critical features (CWE-306) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"trust": 0.8,
"url": "https://jvn.jp/vu/jvnvu92977068/"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-29879"
},
{
"trust": 0.8,
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"trust": 0.6,
"url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
},
{
"trust": 0.6,
"url": "https://www.cybersecurity-help.cz/vdb/sb2022051724"
},
{
"trust": 0.6,
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-132-07"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-29879/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.2357"
},
{
"trust": 0.1,
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-07"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"date": "2023-08-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"date": "2022-05-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"date": "2022-05-20T13:15:16.227000",
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"date": "2023-08-10T08:25:00",
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"date": "2022-06-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"date": "2024-11-21T06:59:53.297000",
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lack of authentication for critical functions in multiple Siemens products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "access control error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…