8.8
Élevée
CVE-2022-30228 A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SICAM GridEdge (Classic) 2.6 | premières → < 2.6.6 | 2.6.6 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SICAM GridEdge (Classic)
Les 6 CVE de SICAM GridEdge (Classic) →
CVE-2024-3596
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response…
9.0
Critique
CVE-2022-34464
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3)
6.3
Moyenne
CVE-2022-30231
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
4.9
Moyenne
CVE-2022-30230
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6)
9.8
Critique