CVE-2022-29877
published 2022-05-20CVE-2022-29877: A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All…
PriorityP336medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.62%
45.5th percentile
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.
Affected
38 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | 7kg8500-0aa00-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8500-0aa00-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8500-0aa10-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8500-0aa10-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8500-0aa30-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8500-0aa30-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa01-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa01-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa02-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa02-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa11-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa11-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa12-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa12-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa31-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa31-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa32-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8501-0aa32-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa00-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa00-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa10-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa10-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa30-0aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8550-0aa30-2aa0_firmware | < 3.00 | 3.00 |
| siemens | 7kg8551-0aa01-0aa0_firmware | < 3.00 | 3.00 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g9j3-3283-g3gq: A vulnerability has been identified in SICAM P850 (All versions < V3
ghsa_unreviewed·2022-05-21
CVE-2022-29877 [MEDIUM] CWE-306 GHSA-g9j3-3283-g3gq: A vulnerability has been identified in SICAM P850 (All versions < V3
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions <
CISA ICS
Siemens SICAM P850 and SICAM P855
cisa_ics·2022-05-12
Siemens SICAM P850 and SICAM P855
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SICAM P850 and SICAM P855
Last RevisedMay 12, 2022
Alert CodeICSA-22-132-07
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: Siemens SICAM P850 and SICAM P855
- Vulnerabilities: Improper Neutralization of Parameter/Argument Delimiters, Cleartext Transmission of Sensitive Information, Cross-site Scripting, Missing Authentication for Critical Function, Authentication Bypass by Capture-replay, Improper Authentication
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-05-20
Published