CVE-2022-29881
MEDIUMSiemens 7kg8500-0aa00-0aa0 Firmware < 3.00 - Missing Authentication
Title source: ruleDescription
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_misc
https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-165073.html
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-471761.html
Scores
CVSS v3
5.3
EPSS
0.0072
EPSS Percentile
72.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-306
Status
published
Products (36)
siemens/7kg8500-0aa00-0aa0_firmware
< 3.00
siemens/7kg8500-0aa00-2aa0_firmware
< 3.00
siemens/7kg8500-0aa10-0aa0_firmware
< 3.00
siemens/7kg8500-0aa10-2aa0_firmware
< 3.00
siemens/7kg8500-0aa30-0aa0_firmware
< 3.00
siemens/7kg8500-0aa30-2aa0_firmware
< 3.00
siemens/7kg8501-0aa01-0aa0_firmware
< 3.00
siemens/7kg8501-0aa01-2aa0_firmware
< 3.00
siemens/7kg8501-0aa02-0aa0_firmware
< 3.00
siemens/7kg8501-0aa02-2aa0_firmware
< 3.00
... and 26 more
Published
May 20, 2022
Tracked Since
Feb 18, 2026