CVE-2022-29881
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | SICAM T | 0 < V3.0 | affected |
Weaknesses
- CWE-306: CWE-306: Missing Authentication for Critical Function
ADP Enrichment
CVE Program Container
Additional References
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-165073.html
- https://cert-portal.siemens.com/productcert/html/ssa-471761.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.