cbcvebase.
CVE-2022-29881
published 2022-05-20

CVE-2022-29881: A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access…

PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.99%
58.6th percentile
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.

Affected

37 ranges· showing 25
VendorProductVersion rangeFixed in
siemens7kg8500-0aa00-0aa0_firmware< 3.003.00
siemens7kg8500-0aa00-2aa0_firmware< 3.003.00
siemens7kg8500-0aa10-0aa0_firmware< 3.003.00
siemens7kg8500-0aa10-2aa0_firmware< 3.003.00
siemens7kg8500-0aa30-0aa0_firmware< 3.003.00
siemens7kg8500-0aa30-2aa0_firmware< 3.003.00
siemens7kg8501-0aa01-0aa0_firmware< 3.003.00
siemens7kg8501-0aa01-2aa0_firmware< 3.003.00
siemens7kg8501-0aa02-0aa0_firmware< 3.003.00
siemens7kg8501-0aa02-2aa0_firmware< 3.003.00
siemens7kg8501-0aa11-0aa0_firmware< 3.003.00
siemens7kg8501-0aa11-2aa0_firmware< 3.003.00
siemens7kg8501-0aa12-0aa0_firmware< 3.003.00
siemens7kg8501-0aa12-2aa0_firmware< 3.003.00
siemens7kg8501-0aa31-0aa0_firmware< 3.003.00
siemens7kg8501-0aa31-2aa0_firmware< 3.003.00
siemens7kg8501-0aa32-0aa0_firmware< 3.003.00
siemens7kg8501-0aa32-2aa0_firmware< 3.003.00
siemens7kg8550-0aa00-0aa0_firmware< 3.003.00
siemens7kg8550-0aa00-2aa0_firmware< 3.003.00
siemens7kg8550-0aa10-0aa0_firmware< 3.003.00
siemens7kg8550-0aa10-2aa0_firmware< 3.003.00
siemens7kg8550-0aa30-0aa0_firmware< 3.003.00
siemens7kg8550-0aa30-2aa0_firmware< 3.003.00
siemens7kg8551-0aa01-0aa0_firmware< 3.003.00

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv4.06.9MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.