8.8
High
CVE-2022-30228 A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SICAM GridEdge (Classic) 2.6 | earliest → < 2.6.6 | 2.6.6 |
References
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SICAM GridEdge (Classic)
The 6 CVEs of SICAM GridEdge (Classic) →
CVE-2024-3596
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response…
9.0
Critical
CVE-2022-34464
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3)
6.3
Medium
CVE-2022-30231
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
4.9
Medium
CVE-2022-30230
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
9.8
Critical