7.1
High
CVE-2022-29882 A vulnerability has been identified in SICAM T (All versions < V3.0)
Description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SICAM T 3.0 | earliest → < 3.0 | 3.0 |
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SICAM T
The 15 CVEs of SICAM T →
CVE-2023-31238
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850…
5.5
Medium
CVE-2023-30901
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850…
4.3
Medium
CVE-2022-43439
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER…
9.9
Critical
CVE-2022-41665
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850…
9.8
Critical