Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-29879 (GCVE-0-2022-29879)
Vulnerability from cvelistv5
Published
2022-05-10 09:47
Modified
2024-08-03 06:33
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-306 - Missing Authentication for Critical Function
Summary
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Siemens | SICAM P850 |
Version: All versions < V3.00 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T06:33:43.279Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P850",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
},
{
"product": "SICAM P855",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions \u003c V3.00"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306: Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-10T09:47:23",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306: Missing Authentication for Critical Function"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2022-29879",
"datePublished": "2022-05-10T09:47:23",
"dateReserved": "2022-04-28T00:00:00",
"dateUpdated": "2024-08-03T06:33:43.279Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2022-29879\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-05-20T13:15:16.227\",\"lastModified\":\"2024-11-21T06:59:53.297\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). La interfaz de administraci\u00f3n basada en la web de los dispositivos afectados no emplea una protecci\u00f3n de acceso especial para determinadas visualizaciones internas del desarrollador. Esto podr\u00eda permitir a los usuarios autenticados acceder a informaci\u00f3n cr\u00edtica del dispositivo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"29D23CC1-B5EA-4088-8552-6BD00DE6DABC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19E9E75A-266E-42F4-A978-1881CFB775D5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0B7A11-AE03-4EDD-B446-CFAE7B83A405\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B4676DE8-BCA3-48AF-B90F-6F4331FDD77B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97E8F3D9-37A0-4DFD-8131-1664893C2D64\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"98F64393-39B7-49DE-8F50-73E7A5DBAB61\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5450BA3D-61FE-46EA-AD56-D04D3809D23D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A5665988-B892-4C16-837A-DA5D1A1FD241\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE1C19C0-3092-4AB8-A131-3284D3CF0A00\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"50A41D5D-D9CE-4436-92E1-87DFE46E703A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8EC17FD2-8B3B-4331-A0E2-991A0C92E119\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F555FCD5-A377-4505-9EB9-83D1FC0BA005\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFAA2339-0C00-4551-958E-76E34DF50F3E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"209B2BF5-0023-4F35-9E1A-5F271A026FA1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC103BEB-FD72-4BCF-8450-8F753986284E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"81CA2D85-1A58-42FB-BD06-F2E236808890\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94BB09DC-2493-4680-A718-847A9F3916C0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"0D62E4F9-7230-496D-A00A-AB71EC9F56B6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83646A62-58E8-47B3-A3E2-9052A223BA3A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"835E6B3A-D357-478D-AC74-1FB0BF1FB48B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"48DA971B-28EA-4443-B546-CE066DE5A611\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8905ED-8C17-42A3-BB22-95F572A2CD41\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"90528A32-4827-4A29-8E54-0DBCEF141183\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"513D4A78-6F4B-421F-BA56-40FF32E12692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"6BECCF69-B791-4F97-94B6-150A52A22543\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"81A0038B-F453-4530-A681-F37AADF797A2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F8D9B433-4F5F-4C63-B16C-047186B726F5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"624701F6-0F97-4A83-A329-38310EA7ABAE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"93845620-72CC-4C54-BF5C-9E9A9DD0439F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B81F629C-DF39-43F0-AEB9-F66CFCB29E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"5178FF49-6E30-47D7-892F-1121288E7E8B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ED2A92F-04A9-46BC-B334-DB06F55614A7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F7E21CE9-87D8-4D20-B343-48AF64E7049D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D80D60C5-AF37-4498-919E-CB6589286B3C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D3C6DE9-9980-46E6-9468-F8167D5CF692\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"8B02F4EC-85D5-442E-B71C-A9CA9C3854F6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C94271C-DAD2-4C53-A701-93A542A3B154\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"4E24F48D-DC93-4126-8830-A7662AAA87CD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"63C21B33-EC43-450A-8F33-0948DD07525B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF24A81-2063-4DAB-B6E4-2546042A553C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"A402337A-B4A8-4F8D-B826-2EE714864C01\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15554D33-7C32-44E6-B16E-D0A5AC903E85\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"F6FE0DFE-B877-4E07-9A9C-8AC24259240F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34B32039-505A-4815-967B-D11F4D337CE0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"1DCF2749-986F-4735-96E8-749E625CAD6A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E74BAD6-218E-477C-B2C2-CE0E578A2400\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"E7558F27-235F-47B8-9D65-944BF1C92DDF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CE65771-9A0E-48AF-A9FE-4705698C8997\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"AEB551BB-4C46-4FA0-B9EF-C70583D02993\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9710DFFE-974F-4A82-9E85-3311D84A951F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF385121-4F72-4EE3-9EC3-BC9B910E74BD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71F882A2-DFFB-4A07-8F62-E52068EDCC35\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"83A63834-D7F7-4112-9C03-AF64EA254B35\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B93C0DE4-4FE9-4C19-AD4A-805910DD9682\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"9C9F3057-5918-4331-863A-46A4FA292F8E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"949B5448-5CCA-45A4-8D6B-8FB70EF42A14\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"EFFF3159-7FCF-4ACC-B06A-EB6414E01307\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"634DEE3C-5BB9-446B-A0FD-95764C0B0461\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"BC81665F-2064-4F85-88BF-5A3F46178CBE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"468D2956-6D5C-48C6-B0C9-868CC9DEA8D9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"274D904F-D09A-4038-97FE-464BBE97A93B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"976E3302-C339-4057-A0DD-EF40A9A501F4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7923FD73-F2FA-4B60-A1E3-F7C4D586269B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.00\",\"matchCriteriaId\":\"3A4EF031-920F-4F69-B25A-779ACA4046B8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D72FBA5B-E455-4E07-B39C-70AEE0C26EBF\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
}
}
ghsa-7gjg-3mrx-xxf9
Vulnerability from github
Published
2022-05-21 00:01
Modified
2022-06-03 00:01
Severity ?
VLAI Severity ?
Details
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
{
"affected": [],
"aliases": [
"CVE-2022-29879"
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-05-20T13:15:00Z",
"severity": "MODERATE"
},
"details": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GHSA-7gjg-3mrx-xxf9",
"modified": "2022-06-03T00:01:47Z",
"published": "2022-05-21T00:01:06Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29879"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
var-202205-0922
Vulnerability from variot
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information. 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware, 7kg8500-0aa10-0aa0 Multiple Siemens products, such as firmware, are vulnerable to lack of authentication for critical functions.Information may be obtained. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30.
A security vulnerability exists in Siemens SICAM P850 and SICAM P855 Devices. Siemens SICAM P850 and SICAM P855
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202205-0922",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sicam p850",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "sicam p855",
"scope": "lt",
"trust": 10.8,
"vendor": "siemens",
"version": "v3.00"
},
{
"model": "7kg8551-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa01-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa02-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa02-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa00-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa12-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa11-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8500-0aa10-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-2aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8551-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa31-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8550-0aa30-0aa0",
"scope": "lt",
"trust": 1.0,
"vendor": "siemens",
"version": "3.00"
},
{
"model": "7kg8501-0aa32-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa02-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa12-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa00-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa10-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa02-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa32-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8550-0aa00-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa01-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa10-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa11-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa31-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa00-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa12-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8550-0aa00-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa11-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa31-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa30-2aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8500-0aa30-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
},
{
"model": "7kg8501-0aa01-0aa0",
"scope": null,
"trust": 0.8,
"vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Michael Messner from Siemens Energy reported these vulnerabilities to Siemens.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
},
"cve": "CVE-2022-29879",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.0,
"id": "CVE-2022-29879",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2022-36392",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2022-29879",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2022-29879",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2022-29879",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2022-29879",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2022-36392",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202205-3125",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information. 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware, 7kg8500-0aa10-0aa0 Multiple Siemens products, such as firmware, are vulnerable to lack of authentication for critical functions.Information may be obtained. The SICAM P850 multifunctional measuring device is used to acquire, visualize, evaluate and transmit electrical measurement variables such as alternating current, alternating voltage, frequency, power, harmonics, etc. The SICAM P855 multifunction device is used to collect, display and transmit measured electrical variables such as AC current, AC voltage, power type, harmonics, etc. Measured values and events are collected and processed according to the power quality standard IEC 61000-4-30. \n\r\n\r\nA security vulnerability exists in Siemens SICAM P850 and SICAM P855 Devices. Siemens SICAM P850 and SICAM P855",
"sources": [
{
"db": "NVD",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2022-29879",
"trust": 3.9
},
{
"db": "SIEMENS",
"id": "SSA-165073",
"trust": 3.0
},
{
"db": "ICS CERT",
"id": "ICSA-22-132-07",
"trust": 1.5
},
{
"db": "JVN",
"id": "JVNVU92977068",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2022-36392",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2022.2357",
"trust": 0.6
},
{
"db": "CS-HELP",
"id": "SB2022051724",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2022-29879",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"id": "VAR-202205-0922",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
}
]
},
"last_update_date": "2024-11-23T21:50:30.068000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Patch for Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability (CNVD-2022-36392)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/332556"
},
{
"title": "Siemens SICAM Fixes for access control error vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=194649"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.0
},
{
"problemtype": "Lack of authentication for critical features (CWE-306) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"trust": 0.8,
"url": "https://jvn.jp/vu/jvnvu92977068/"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2022-29879"
},
{
"trust": 0.8,
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"trust": 0.6,
"url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
},
{
"trust": 0.6,
"url": "https://www.cybersecurity-help.cz/vdb/sb2022051724"
},
{
"trust": 0.6,
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-22-132-07"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2022-29879/"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2022.2357"
},
{
"trust": 0.1,
"url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-07"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"db": "VULMON",
"id": "CVE-2022-29879"
},
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"date": "2023-08-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"date": "2022-05-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"date": "2022-05-20T13:15:16.227000",
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2022-05-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2022-36392"
},
{
"date": "2023-08-10T08:25:00",
"db": "JVNDB",
"id": "JVNDB-2022-010136"
},
{
"date": "2022-06-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202205-3125"
},
{
"date": "2024-11-21T06:59:53.297000",
"db": "NVD",
"id": "CVE-2022-29879"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lack of authentication for critical functions in multiple Siemens products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2022-010136"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "access control error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202205-3125"
}
],
"trust": 0.6
}
}
gsd-2022-29879
Vulnerability from gsd
Modified
2023-12-13 01:19
Details
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-29879",
"description": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GSD-2022-29879"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-29879"
],
"details": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"id": "GSD-2022-29879",
"modified": "2023-12-13T01:19:42.428571Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P850",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
},
{
"product_name": "SICAM P855",
"version": {
"version_data": [
{
"version_value": "All versions \u003c V3.00"
}
]
}
}
]
},
"vendor_name": "Siemens"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-306: Missing Authentication for Critical Function"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "productcert@siemens.com",
"ID": "CVE-2022-29879"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "N/A",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-06-02T14:03Z",
"publishedDate": "2022-05-20T13:15Z"
}
}
}
fkie_cve-2022-29879
Vulnerability from fkie_nvd
Published
2022-05-20 13:15
Modified
2024-11-21 06:59
Severity ?
Summary
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
References
| URL | Tags | ||
|---|---|---|---|
| productcert@siemens.com | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf | Patch, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "29D23CC1-B5EA-4088-8552-6BD00DE6DABC",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "19E9E75A-266E-42F4-A978-1881CFB775D5",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F46742A1-FEA3-46E8-A1E4-D8203F3C2CF8",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0B7A11-AE03-4EDD-B446-CFAE7B83A405",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B4676DE8-BCA3-48AF-B90F-6F4331FDD77B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "97E8F3D9-37A0-4DFD-8131-1664893C2D64",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "98F64393-39B7-49DE-8F50-73E7A5DBAB61",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5450BA3D-61FE-46EA-AD56-D04D3809D23D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A5665988-B892-4C16-837A-DA5D1A1FD241",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CE1C19C0-3092-4AB8-A131-3284D3CF0A00",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "50A41D5D-D9CE-4436-92E1-87DFE46E703A",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8EC17FD2-8B3B-4331-A0E2-991A0C92E119",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F555FCD5-A377-4505-9EB9-83D1FC0BA005",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AFAA2339-0C00-4551-958E-76E34DF50F3E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "209B2BF5-0023-4F35-9E1A-5F271A026FA1",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC103BEB-FD72-4BCF-8450-8F753986284E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "81CA2D85-1A58-42FB-BD06-F2E236808890",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "94BB09DC-2493-4680-A718-847A9F3916C0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0D62E4F9-7230-496D-A00A-AB71EC9F56B6",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83646A62-58E8-47B3-A3E2-9052A223BA3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3C748EAE-AFA9-4600-85CD-D5E1C4A2ABB4",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "835E6B3A-D357-478D-AC74-1FB0BF1FB48B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "48DA971B-28EA-4443-B546-CE066DE5A611",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC8905ED-8C17-42A3-BB22-95F572A2CD41",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "90528A32-4827-4A29-8E54-0DBCEF141183",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "513D4A78-6F4B-421F-BA56-40FF32E12692",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6BECCF69-B791-4F97-94B6-150A52A22543",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "81A0038B-F453-4530-A681-F37AADF797A2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F8D9B433-4F5F-4C63-B16C-047186B726F5",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "624701F6-0F97-4A83-A329-38310EA7ABAE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "93845620-72CC-4C54-BF5C-9E9A9DD0439F",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B81F629C-DF39-43F0-AEB9-F66CFCB29E85",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5178FF49-6E30-47D7-892F-1121288E7E8B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6ED2A92F-04A9-46BC-B334-DB06F55614A7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F7E21CE9-87D8-4D20-B343-48AF64E7049D",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D80D60C5-AF37-4498-919E-CB6589286B3C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F9DBF9D2-1C19-43F8-BFCA-1024BFC40DDE",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D3C6DE9-9980-46E6-9468-F8167D5CF692",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8B02F4EC-85D5-442E-B71C-A9CA9C3854F6",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9C94271C-DAD2-4C53-A701-93A542A3B154",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4E24F48D-DC93-4126-8830-A7662AAA87CD",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1A1E983D-BE5E-4D3C-AD00-3EFB6775AE80",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "63C21B33-EC43-450A-8F33-0948DD07525B",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4AF24A81-2063-4DAB-B6E4-2546042A553C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A402337A-B4A8-4F8D-B826-2EE714864C01",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "15554D33-7C32-44E6-B16E-D0A5AC903E85",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F6FE0DFE-B877-4E07-9A9C-8AC24259240F",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34B32039-505A-4815-967B-D11F4D337CE0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1DCF2749-986F-4735-96E8-749E625CAD6A",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9E74BAD6-218E-477C-B2C2-CE0E578A2400",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E7558F27-235F-47B8-9D65-944BF1C92DDF",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0CE65771-9A0E-48AF-A9FE-4705698C8997",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AEB551BB-4C46-4FA0-B9EF-C70583D02993",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9710DFFE-974F-4A82-9E85-3311D84A951F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D1117B8F-7911-4B2E-A9DE-5F8D3FA0DFCF",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DF385121-4F72-4EE3-9EC3-BC9B910E74BD",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9CF9E3B9-1DC8-4293-8D2C-9B5CF6F50E23",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "71F882A2-DFFB-4A07-8F62-E52068EDCC35",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "83A63834-D7F7-4112-9C03-AF64EA254B35",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B93C0DE4-4FE9-4C19-AD4A-805910DD9682",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C9F3057-5918-4331-863A-46A4FA292F8E",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "949B5448-5CCA-45A4-8D6B-8FB70EF42A14",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EFFF3159-7FCF-4ACC-B06A-EB6414E01307",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "634DEE3C-5BB9-446B-A0FD-95764C0B0461",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BC81665F-2064-4F85-88BF-5A3F46178CBE",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "468D2956-6D5C-48C6-B0C9-868CC9DEA8D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B302DC77-B1E2-46DF-8E6A-9F7CCBF6A899",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "274D904F-D09A-4038-97FE-464BBE97A93B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "976E3302-C339-4057-A0DD-EF40A9A501F4",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7923FD73-F2FA-4B60-A1E3-F7C4D586269B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A4EF031-920F-4F69-B25A-779ACA4046B8",
"versionEndExcluding": "3.00",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D72FBA5B-E455-4E07-B39C-70AEE0C26EBF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3.00), SICAM P850 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3. 00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00), SICAM P855 (Todas las versiones anteriores a V3.00). La interfaz de administraci\u00f3n basada en la web de los dispositivos afectados no emplea una protecci\u00f3n de acceso especial para determinadas visualizaciones internas del desarrollador. Esto podr\u00eda permitir a los usuarios autenticados acceder a informaci\u00f3n cr\u00edtica del dispositivo"
}
],
"id": "CVE-2022-29879",
"lastModified": "2024-11-21T06:59:53.297",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-05-20T13:15:16.227",
"references": [
{
"source": "productcert@siemens.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
}
],
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "productcert@siemens.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-306"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
icsa-22-132-07
Vulnerability from csaf_cisa
Published
2022-05-10 00:00
Modified
2025-05-06 06:00
Summary
Siemens SICAM P850 and SICAM P855
Notes
Summary
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting this vulnerability to CISA."
},
{
"names": [
"Michael Messner"
],
"organization": "Siemens Energy",
"summary": "reporting the vulnerabilities"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-165073.json"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-165073.txt"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-07.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SICAM P850 and SICAM P855",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-132-07",
"initial_release_date": "2022-05-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0022",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29872.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29873.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29874.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29876.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29877",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29877.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29877"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29878.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29879.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29880.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29881.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29882.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29883.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29883"
}
]
}
ICSA-22-132-07
Vulnerability from csaf_cisa
Published
2022-05-10 00:00
Modified
2025-05-06 06:00
Summary
Siemens SICAM P850 and SICAM P855
Notes
Summary
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.
Siemens has released updates for the affected products and recommends to update to the latest versions.
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting this vulnerability to CISA."
},
{
"names": [
"Michael Messner"
],
"organization": "Siemens Energy",
"summary": "reporting the vulnerabilities"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.\n\nSiemens has released updates for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\n\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.\n\nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-165073.json"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-165073.txt"
},
{
"category": "self",
"summary": "SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-132-07.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-22-132-07 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SICAM P850 and SICAM P855",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-22-132-07",
"initial_release_date": "2022-05-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2022-05-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"7KG8500-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P850",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"model_numbers": [
"7KG8501-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P850"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA00-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0022",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA10-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"model_numbers": [
"7KG8550-0AA30-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA01-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA02-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA11-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA12-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA31-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-0AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV3.00",
"product": {
"name": "SICAM P855",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"model_numbers": [
"7KG8551-0AA32-2AA0"
]
}
}
}
],
"category": "product_name",
"name": "SICAM P855"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-29872",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29872 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29872.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29872"
},
{
"cve": "CVE-2022-29873",
"cwe": {
"id": "CWE-141",
"name": "Improper Neutralization of Parameter/Argument Delimiters"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29873 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29873.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29873"
},
{
"cve": "CVE-2022-29874",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29874 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29874.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29874"
},
{
"cve": "CVE-2022-29876",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29876 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29876.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29876"
},
{
"cve": "CVE-2022-29877",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29877 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29877.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29877"
},
{
"cve": "CVE-2022-29878",
"cwe": {
"id": "CWE-294",
"name": "Authentication Bypass by Capture-replay"
},
"notes": [
{
"category": "summary",
"text": "Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, and request the webpage repeatedly to wait for the same challenge to reappear for which the correct response is known. This could allow the attacker to access the management interface of the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29878 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29878.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29878"
},
{
"cve": "CVE-2022-29879",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29879 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29879.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29879"
},
{
"cve": "CVE-2022-29880",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29880 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29880.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29880"
},
{
"cve": "CVE-2022-29881",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"notes": [
{
"category": "summary",
"text": "The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29881 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29881.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29881"
},
{
"cve": "CVE-2022-29882",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29882 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29882.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29882"
},
{
"cve": "CVE-2022-29883",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
},
"references": [
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P850",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 - SICAM P855",
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"summary": "CVE-2022-29883 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2022-29883.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743594/"
},
{
"category": "vendor_fix",
"details": "Update to V3.00 or later version",
"product_ids": [
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109743621/"
},
{
"category": "mitigation",
"details": "Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036"
]
}
],
"title": "CVE-2022-29883"
}
]
}
CERTFR-2022-AVI-435
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
- SICAM P850 versions antérieures à 3.00
- Simcenter Femap versions antérieures à 2022.2
- SIMATIC NET PC Software versions 14.x antérieures à 14 SP1 Update 14
- SIMATIC NET PC Software versions 17.x antérieures à 17 SP1
- SIMATIC Process Historian OPC UA Server versions antérieures à 2020 SP1
- SIMATIC WinCC versions 7.5.x antérieures à V7.5 SP2 Update 8
- SIMATIC CP 442-1 RNA versions antérieures à 1.5.18
- SIMATIC CP 443-1 RNA versions antérieures à 1.5.18
- JT2Go versions antérieures à 13.3.0.3
- Teamcenter Visualization versions 13.3.x antérieures à 13.3.0.3
- Teamcenter Visualization versions 14.0.x antérieures à 14.0.0.1
- Desigo DXR2 versions antérieures à 01.21.142.5-22
- Desigo PXC3 versions antérieures à 01.21.142.4-18
- Desigo PXC4 versions antérieures à 02.20.142.10-10884
- Desigo PXC5 versions antérieures à 02.20.142.10-10884
- RUGGEDCOM RM1224 LTE(4G) EU et RM1224 LTE(4G) NAM versions antérieures à 7.1
- SCALANCE M804PB, M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2), M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2), M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2), M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2), M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), M874-2 (6GK5874-2AA00-2AA2), M874-3 (6GK5874-3AA00-2AA2), M876-3 (EVDO) (6GK5876-3AA02-2BA2), M876-3 (ROK) (6GK5876-3AA02-2EA2), M876-4 (EU) (6GK5876-4AA00-2BA2), M876-4 (NAM) (6GK5876-4AA00-2DA2), MUM856-1 (EU) (6GK5856-2EA00-3DA1), MUM856-1 (RoW) (6GK5856-2EA00-3AA1) et S615 (6GK5615-0AA00-2AA2) versions antérieures à 7.1
- SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions antérieures à 3.0.22
- SIMATIC RTU3010C (6NH3112-0BA00-0XX0), RTU3030C (6NH3112-3BA00-0XX0), RTU3031C (6NH3112-3BB00-0XX0) et RTU3041C (6NH3112-4BB00-0XX0) versions antérieures à 5.0.14
- SIPLUS NET CP 1543-1 versions antérieures à 3.0.22
- OpenV2G versions antérieures à 0.9.5
- Teamcenter versions 12.4.x antérieures à 12.4.0.13
- Teamcenter versions 13.0.x antérieures à 13.0.0.9
- Teamcenter versions 13.2.x antérieures à 13.2.0.8
- Teamcenter versions 13.3.x antérieures à 13.3.0.3
- SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0), RF610R ETSI (6GT2811-6BC10-0AA0), RF610R FCC (6GT2811-6BC10-1AA0), RF615R CMIIT (6GT2811-6CC10-2AA0), RF615R ETSI (6GT2811-6CC10-0AA0), RF615R FCC (6GT2811-6CC10-1AA0), RF650R ARIB (6GT2811-6AB20-4AA0), RF650R CMIIT (6GT2811-6AB20-2AA0), RF650R ETSI (6GT2811-6AB20-0AA0), RF650R FCC (6GT2811-6AB20-1AA0), RF680R ARIB (6GT2811-6AA10-4AA0), RF680R CMIIT (6GT2811-6AA10-2AA0), RF680R ETSI (6GT2811-6AA10-0AA0), RF680R FCC (6GT2811-6AA10-1AA0), RF685R ARIB (6GT2811-6CA10-4AA0), RF685R CMIIT (6GT2811-6CA10-2AA0), RF685R ETSI (6GT2811-6CA10-0AA0) et RF685R FCC (6GT2811-6CA10-1AA0) versions 3.0.x antérieures à 4.0
- SIMATIC RF166C (6GT2002-0EE20), RF185C (6GT2002-0JE10), RF186C (6GT2002-0JE20), RF186CI (6GT2002-0JE50), RF188C (6GT2002-0JE40) et RF188CI (6GT2002-0JE60) versions 1.1.x antérieures à 1.3.2
- SIMATIC RF360R (6GT2801-5BA30) versions antérieures à 2.0
En fonction de la vulnérabilité, l'éditeur ne prévoit pas de correctif de sécurité pour les produits suivants :
- SITOP Manager toutes versions
- TeleControl Server Basic versions 3.x
- SIMATIC NET PC Software versions 15.x
- SIMATIC NET PC Software versions 16.x
- SIMATIC WinCC versions 16.x
- SIMATIC WinCC versions 17.x
- SIMATIC WinCC Runtime Professional toutes versions
- SIMATIC WinCC Unified Scada Runtime toutes versions
- SIMATIC PCS 7 versions 9.0.x et antérieures
- SIMATIC PCS 7 versions 9.1.x
- LOGO! CMR family toutes versions
- SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) toutes versions
- Teamcenter versions 13.1.x
- Teamcenter versions 14.0.x
Se référer aux mesures de contournement listées dans les avis de l'éditeur.
Impacted products
| Vendor | Product | Description |
|---|
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cul\u003e \u003cli\u003eSICAM P850 versions ant\u00e9rieures \u00e0 3.00\u003c/li\u003e \u003cli\u003eSimcenter Femap versions ant\u00e9rieures \u00e0 2022.2\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 14.x ant\u00e9rieures \u00e0 14 SP1 Update 14\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 17.x ant\u00e9rieures \u00e0 17 SP1\u003c/li\u003e \u003cli\u003eSIMATIC Process Historian OPC UA Server versions ant\u00e9rieures \u00e0 2020 SP1\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 7.5.x ant\u00e9rieures \u00e0 V7.5 SP2 Update 8\u003c/li\u003e \u003cli\u003eSIMATIC CP 442-1 RNA versions ant\u00e9rieures \u00e0 1.5.18\u003c/li\u003e \u003cli\u003eSIMATIC CP 443-1 RNA versions ant\u00e9rieures \u00e0 1.5.18\u003c/li\u003e \u003cli\u003eJT2Go versions ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eTeamcenter Visualization versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eTeamcenter Visualization versions 14.0.x ant\u00e9rieures \u00e0 14.0.0.1\u003c/li\u003e \u003cli\u003eDesigo DXR2 versions ant\u00e9rieures \u00e0 01.21.142.5-22\u003c/li\u003e \u003cli\u003eDesigo PXC3 versions ant\u00e9rieures \u00e0 01.21.142.4-18\u003c/li\u003e \u003cli\u003eDesigo PXC4 versions ant\u00e9rieures \u00e0 02.20.142.10-10884\u003c/li\u003e \u003cli\u003eDesigo PXC5 versions ant\u00e9rieures \u00e0 02.20.142.10-10884\u003c/li\u003e \u003cli\u003eRUGGEDCOM RM1224 LTE(4G) EU et RM1224 LTE(4G) NAM versions ant\u00e9rieures \u00e0 7.1\u003c/li\u003e \u003cli\u003eSCALANCE M804PB, M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2), M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2), M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2), M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2), M826-2 SHDSL-Router (6GK5826-2AB00-2AB2), M874-2 (6GK5874-2AA00-2AA2), M874-3 (6GK5874-3AA00-2AA2), M876-3 (EVDO) (6GK5876-3AA02-2BA2), M876-3 (ROK) (6GK5876-3AA02-2EA2), M876-4 (EU) (6GK5876-4AA00-2BA2), M876-4 (NAM) (6GK5876-4AA00-2DA2), MUM856-1 (EU) (6GK5856-2EA00-3DA1), MUM856-1 (RoW) (6GK5856-2EA00-3AA1) et S615 (6GK5615-0AA00-2AA2) versions ant\u00e9rieures \u00e0 7.1\u003c/li\u003e \u003cli\u003eSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions ant\u00e9rieures \u00e0 3.0.22\u003c/li\u003e \u003cli\u003eSIMATIC RTU3010C (6NH3112-0BA00-0XX0), RTU3030C (6NH3112-3BA00-0XX0), RTU3031C (6NH3112-3BB00-0XX0) et RTU3041C (6NH3112-4BB00-0XX0) versions ant\u00e9rieures \u00e0 5.0.14\u003c/li\u003e \u003cli\u003eSIPLUS NET CP 1543-1 versions ant\u00e9rieures \u00e0 3.0.22\u003c/li\u003e \u003cli\u003eOpenV2G versions ant\u00e9rieures \u00e0 0.9.5\u003c/li\u003e \u003cli\u003eTeamcenter versions 12.4.x ant\u00e9rieures \u00e0 12.4.0.13\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.0.x ant\u00e9rieures \u00e0 13.0.0.9\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.2.x ant\u00e9rieures \u00e0 13.2.0.8\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.3\u003c/li\u003e \u003cli\u003eSIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0), RF610R ETSI (6GT2811-6BC10-0AA0), RF610R FCC (6GT2811-6BC10-1AA0), RF615R CMIIT (6GT2811-6CC10-2AA0), RF615R ETSI (6GT2811-6CC10-0AA0), RF615R FCC (6GT2811-6CC10-1AA0), RF650R ARIB (6GT2811-6AB20-4AA0), RF650R CMIIT (6GT2811-6AB20-2AA0), RF650R ETSI (6GT2811-6AB20-0AA0), RF650R FCC (6GT2811-6AB20-1AA0), RF680R ARIB (6GT2811-6AA10-4AA0), RF680R CMIIT (6GT2811-6AA10-2AA0), RF680R ETSI (6GT2811-6AA10-0AA0), RF680R FCC (6GT2811-6AA10-1AA0), RF685R ARIB (6GT2811-6CA10-4AA0), RF685R CMIIT (6GT2811-6CA10-2AA0), RF685R ETSI (6GT2811-6CA10-0AA0) et RF685R FCC (6GT2811-6CA10-1AA0) versions 3.0.x ant\u00e9rieures \u00e0 4.0\u003c/li\u003e \u003cli\u003eSIMATIC RF166C (6GT2002-0EE20), RF185C (6GT2002-0JE10), RF186C (6GT2002-0JE20), RF186CI (6GT2002-0JE50), RF188C (6GT2002-0JE40) et RF188CI (6GT2002-0JE60) versions 1.1.x ant\u00e9rieures \u00e0 1.3.2\u003c/li\u003e \u003cli\u003eSIMATIC RF360R (6GT2801-5BA30) versions ant\u00e9rieures \u00e0 2.0\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eEn fonction de la vuln\u00e9rabilit\u00e9, l\u0027\u00e9diteur ne pr\u00e9voit pas de correctif de s\u00e9curit\u00e9 pour les produits suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eSITOP Manager toutes versions\u003c/li\u003e \u003cli\u003eTeleControl Server Basic versions 3.x\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 15.x\u003c/li\u003e \u003cli\u003eSIMATIC NET PC Software versions 16.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 16.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC versions 17.x\u003c/li\u003e \u003cli\u003eSIMATIC WinCC Runtime Professional toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC WinCC Unified Scada Runtime toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC PCS 7 versions 9.0.x et ant\u00e9rieures\u003c/li\u003e \u003cli\u003eSIMATIC PCS 7 versions 9.1.x\u003c/li\u003e \u003cli\u003eLOGO! CMR family toutes versions\u003c/li\u003e \u003cli\u003eSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) toutes versions\u003c/li\u003e \u003cli\u003eTeamcenter versions 13.1.x\u003c/li\u003e \u003cli\u003eTeamcenter versions 14.0.x\u003c/li\u003e \u003c/ul\u003e \u003cp\u003eSe r\u00e9f\u00e9rer aux mesures de contournement list\u00e9es dans les avis de l\u0027\u00e9diteur.\u003c/p\u003e ",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-27653",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27653"
},
{
"name": "CVE-2022-24043",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24043"
},
{
"name": "CVE-2022-29879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29879"
},
{
"name": "CVE-2022-24044",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24044"
},
{
"name": "CVE-2022-24041",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24041"
},
{
"name": "CVE-2022-27242",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27242"
},
{
"name": "CVE-2021-22901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22901"
},
{
"name": "CVE-2022-24290",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24290"
},
{
"name": "CVE-2022-29880",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29880"
},
{
"name": "CVE-2022-24045",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24045"
},
{
"name": "CVE-2022-29882",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29882"
},
{
"name": "CVE-2022-24039",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24039"
},
{
"name": "CVE-2022-24042",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24042"
},
{
"name": "CVE-2021-22924",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22924"
},
{
"name": "CVE-2022-29033",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29033"
},
{
"name": "CVE-2022-24040",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24040"
},
{
"name": "CVE-2022-24287",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24287"
},
{
"name": "CVE-2021-41545",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-41545"
},
{
"name": "CVE-2022-29873",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29873"
},
{
"name": "CVE-2022-29801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29801"
},
{
"name": "CVE-2021-40142",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40142"
},
{
"name": "CVE-2022-29874",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29874"
},
{
"name": "CVE-2022-27640",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27640"
},
{
"name": "CVE-2022-29876",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29876"
},
{
"name": "CVE-2022-29877",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29877"
},
{
"name": "CVE-2021-45117",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45117"
},
{
"name": "CVE-2022-29029",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29029"
},
{
"name": "CVE-2022-29881",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29881"
},
{
"name": "CVE-2022-29032",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29032"
},
{
"name": "CVE-2022-29872",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29872"
},
{
"name": "CVE-2022-29878",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29878"
},
{
"name": "CVE-2021-31340",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31340"
},
{
"name": "CVE-2022-29031",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29031"
},
{
"name": "CVE-2022-29030",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29030"
},
{
"name": "CVE-2022-29028",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29028"
},
{
"name": "CVE-2022-29883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29883"
}
],
"initial_release_date": "2022-05-10T00:00:00",
"last_revision_date": "2022-05-10T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-435",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-05-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-736385 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-736385.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-732250 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-732250.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-321292 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-321292.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-787292 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-787292.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-162616 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-162616.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-553086 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-553086.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-480937 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-480937.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-626968 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-626968.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-363107 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-363107.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-789162 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-789162.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-165073 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-662649 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-662649.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-285795 du 10 mai 2022",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-285795.html"
}
]
}
cnvd-2022-36392
Vulnerability from cnvd
Title
Siemens SICAM P850和SICAM P855 Devices身份验证漏洞（CNVD-2022-36392）
Description
SICAM P850多功能测量装置用于采集、可视化、评估和传输电气测量变量，如交流电、交流电压、频率、功率、谐波等。SICAM P855多功能设备用于收集、显示和传输测量的电气变量，如交流电流、交流电压、功率类型、谐波等。根据电能质量标准IEC 61000-4-30收集和处理测量值和事件。
Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响设备基于web管理界面不会对某些内部开发人员视图采用特殊的访问保护，攻击者可利用漏洞经过身份验证的用户访问关键设备信息。
Severity
中
VLAI Severity ?
Patch Name
Siemens SICAM P850和SICAM P855 Devices身份验证漏洞（CNVD-2022-36392）的补丁
Patch Description
SICAM P850多功能测量装置用于采集、可视化、评估和传输电气测量变量，如交流电、交流电压、频率、功率、谐波等。SICAM P855多功能设备用于收集、显示和传输测量的电气变量，如交流电流、交流电压、功率类型、谐波等。根据电能质量标准IEC 61000-4-30收集和处理测量值和事件。
Siemens SICAM P850和SICAM P855 Devices存在安全漏洞，该漏洞是由于受影响设备基于web管理界面不会对某些内部开发人员视图采用特殊的访问保护，攻击者可利用漏洞经过身份验证的用户访问关键设备信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-165073.html
Reference
https://cert-portal.siemens.com/productcert/html/ssa-165073.html
Impacted products
| Name | ['Siemens SICAM P850 (7KG8500-0AA00-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA00-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA10-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8500-0AA30-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA01-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA02-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA11-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA12-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA31-2AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-0AA0) < V3.00', 'Siemens SICAM P850 (7KG8501-0AA32-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA00-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA10-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8550-0AA30-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA01-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA02-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA11-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA12-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA31-2AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-0AA0) < V3.00', 'Siemens SICAM P855 (7KG8551-0AA32-2AA0) < V3.00'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2022-29879"
}
},
"description": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\n\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u57fa\u4e8eweb\u7ba1\u7406\u754c\u9762\u4e0d\u4f1a\u5bf9\u67d0\u4e9b\u5185\u90e8\u5f00\u53d1\u4eba\u5458\u89c6\u56fe\u91c7\u7528\u7279\u6b8a\u7684\u8bbf\u95ee\u4fdd\u62a4\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u8bbf\u95ee\u5173\u952e\u8bbe\u5907\u4fe1\u606f\u3002",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-165073.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2022-36392",
"openTime": "2022-05-11",
"patchDescription": "SICAM P850\u591a\u529f\u80fd\u6d4b\u91cf\u88c5\u7f6e\u7528\u4e8e\u91c7\u96c6\u3001\u53ef\u89c6\u5316\u3001\u8bc4\u4f30\u548c\u4f20\u8f93\u7535\u6c14\u6d4b\u91cf\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u3001\u4ea4\u6d41\u7535\u538b\u3001\u9891\u7387\u3001\u529f\u7387\u3001\u8c10\u6ce2\u7b49\u3002SICAM P855\u591a\u529f\u80fd\u8bbe\u5907\u7528\u4e8e\u6536\u96c6\u3001\u663e\u793a\u548c\u4f20\u8f93\u6d4b\u91cf\u7684\u7535\u6c14\u53d8\u91cf\uff0c\u5982\u4ea4\u6d41\u7535\u6d41\u3001\u4ea4\u6d41\u7535\u538b\u3001\u529f\u7387\u7c7b\u578b\u3001\u8c10\u6ce2\u7b49\u3002\u6839\u636e\u7535\u80fd\u8d28\u91cf\u6807\u51c6IEC 61000-4-30\u6536\u96c6\u548c\u5904\u7406\u6d4b\u91cf\u503c\u548c\u4e8b\u4ef6\u3002\r\n\r\nSiemens SICAM P850\u548cSICAM P855 Devices\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u57fa\u4e8eweb\u7ba1\u7406\u754c\u9762\u4e0d\u4f1a\u5bf9\u67d0\u4e9b\u5185\u90e8\u5f00\u53d1\u4eba\u5458\u89c6\u56fe\u91c7\u7528\u7279\u6b8a\u7684\u8bbf\u95ee\u4fdd\u62a4\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u8bbf\u95ee\u5173\u952e\u8bbe\u5907\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Siemens SICAM P850\u548cSICAM P855 Devices\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2022-36392\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Siemens SICAM P850 (7KG8500-0AA00-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA00-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA10-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA10-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA30-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8500-0AA30-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA01-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA01-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA02-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA02-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA11-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA11-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA12-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA12-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA31-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA31-2AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA32-0AA0) \u003c V3.00",
"Siemens SICAM P850 (7KG8501-0AA32-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA00-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA00-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA10-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA10-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA30-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8550-0AA30-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA01-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA01-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA02-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA02-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA11-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA11-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA12-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA12-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA31-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA31-2AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA32-0AA0) \u003c V3.00",
"Siemens SICAM P855 (7KG8551-0AA32-2AA0) \u003c V3.00"
]
},
"referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-165073.html",
"serverity": "\u4e2d",
"submitTime": "2022-05-11",
"title": "Siemens SICAM P850\u548cSICAM P855 Devices\u8eab\u4efd\u9a8c\u8bc1\u6f0f\u6d1e\uff08CNVD-2022-36392\uff09"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…