CVE-2022-29879

EUVD-2022-34191 · Published May 20, 2022

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.

Technologies

Siemens 7Kg8501-0Aa11-2Aa0 FirmwareSiemens 7Kg8501-0Aa12-2Aa0 FirmwareSiemens 7Kg8500-0Aa30-0Aa0 FirmwareSiemens 7Kg8551-0Aa12-2Aa0 FirmwareSiemens 7Kg8501-0Aa32-2Aa0Siemens 7Kg8501-0Aa32-2Aa0 FirmwareSiemens 7Kg8500-0Aa10-2Aa0 FirmwareSiemens 7Kg8501-0Aa31-2Aa0Siemens 7Kg8501-0Aa01-2Aa0Siemens 7Kg8550-0Aa00-0Aa0 FirmwareSiemens 7Kg8551-0Aa01-2Aa0Siemens 7Kg8551-0Aa02-0Aa0Siemens 7Kg8550-0Aa10-2Aa0Siemens 7Kg8501-0Aa02-0Aa0Siemens 7Kg8551-0Aa12-2Aa0Siemens 7Kg8550-0Aa30-2Aa0Siemens 7Kg8551-0Aa02-2Aa0Siemens 7Kg8551-0Aa32-2Aa0Siemens 7Kg8550-0Aa10-2Aa0 FirmwareSiemens 7Kg8501-0Aa01-0Aa0 FirmwareSiemens 7Kg8500-0Aa00-2Aa0 FirmwareSiemens 7Kg8500-0Aa30-2Aa0 FirmwareSiemens 7Kg8501-0Aa11-0Aa0 FirmwareSiemens 7Kg8501-0Aa32-0Aa0Siemens 7Kg8551-0Aa01-0Aa0Siemens 7Kg8500-0Aa00-0Aa0Siemens 7Kg8551-0Aa11-2Aa0Siemens 7Kg8550-0Aa10-0Aa0Siemens 7Kg8551-0Aa12-0Aa0 FirmwareSiemens 7Kg8551-0Aa11-0Aa0Siemens 7Kg8500-0Aa10-0Aa0Siemens 7Kg8551-0Aa11-2Aa0 FirmwareSiemens 7Kg8551-0Aa31-0Aa0 FirmwareSiemens 7Kg8551-0Aa12-0Aa0Siemens 7Kg8501-0Aa11-2Aa0Siemens 7Kg8551-0Aa02-2Aa0 FirmwareSiemens 7Kg8501-0Aa01-0Aa0Siemens 7Kg8550-0Aa00-2Aa0Siemens 7Kg8551-0Aa01-0Aa0 FirmwareSiemens 7Kg8501-0Aa31-2Aa0 FirmwareSiemens 7Kg8501-0Aa02-2Aa0Siemens 7Kg8551-0Aa32-2Aa0 FirmwareSiemens 7Kg8500-0Aa00-0Aa0 FirmwareSiemens 7Kg8501-0Aa02-0Aa0 FirmwareSiemens 7Kg8500-0Aa10-0Aa0 FirmwareSiemens 7Kg8501-0Aa11-0Aa0Siemens 7Kg8501-0Aa02-2Aa0 FirmwareSiemens 7Kg8501-0Aa12-0Aa0Siemens 7Kg8550-0Aa30-2Aa0 FirmwareSiemens 7Kg8500-0Aa10-2Aa0Siemens 7Kg8551-0Aa31-0Aa0Siemens 7Kg8550-0Aa00-0Aa0Siemens 7Kg8551-0Aa31-2Aa0 FirmwareSiemens 7Kg8551-0Aa32-0Aa0 FirmwareSiemens 7Kg8551-0Aa02-0Aa0 FirmwareSiemens 7Kg8551-0Aa31-2Aa0Siemens 7Kg8501-0Aa01-2Aa0 FirmwareSiemens 7Kg8551-0Aa11-0Aa0 FirmwareSiemens 7Kg8550-0Aa30-0Aa0Siemens 7Kg8500-0Aa30-2Aa0Siemens 7Kg8501-0Aa31-0Aa0 FirmwareSiemens 7Kg8550-0Aa10-0Aa0 FirmwareSiemens 7Kg8551-0Aa01-2Aa0 FirmwareSiemens 7Kg8550-0Aa00-2Aa0 FirmwareSiemens 7Kg8550-0Aa30-0Aa0 FirmwareSiemens 7Kg8501-0Aa12-2Aa0Siemens 7Kg8500-0Aa00-2Aa0Siemens 7Kg8501-0Aa31-0Aa0Siemens 7Kg8551-0Aa32-0Aa0Siemens 7Kg8500-0Aa30-0Aa0Siemens 7Kg8501-0Aa32-0Aa0 FirmwareSiemens 7Kg8501-0Aa12-0Aa0 Firmware

Weaknesses

CWE-306

CVSS scores

v4.05.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
v3.16.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
v2.04.0AV:N/AC:L/Au:S/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

Potentially impacted assets

See if this affects your attack surface