Vulnerability Description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | 7Kg8500-0Aa00-0Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa00-0Aa0 | - |
| Siemens | 7Kg8500-0Aa00-2Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa00-2Aa0 | - |
| Siemens | 7Kg8500-0Aa10-0Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa10-0Aa0 | - |
| Siemens | 7Kg8500-0Aa10-2Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa10-2Aa0 | - |
| Siemens | 7Kg8500-0Aa30-0Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa30-0Aa0 | - |
| Siemens | 7Kg8500-0Aa30-2Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8500-0Aa30-2Aa0 | - |
| Siemens | 7Kg8501-0Aa01-0Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8501-0Aa01-0Aa0 | - |
| Siemens | 7Kg8501-0Aa01-2Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8501-0Aa01-2Aa0 | - |
| Siemens | 7Kg8501-0Aa02-0Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8501-0Aa02-0Aa0 | - |
| Siemens | 7Kg8501-0Aa02-2Aa0 Firmware | < 3.00 |
| Siemens | 7Kg8501-0Aa02-2Aa0 | - |
Related Weaknesses (CWE)
References
- https://cert-portal.siemens.com/productcert/html/ssa-165073.html
- https://cert-portal.siemens.com/productcert/html/ssa-471761.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdfPatchVendor Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdfPatchVendor Advisory
FAQ
What is CVE-2022-29883?
CVE-2022-29883 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to del...
How severe is CVE-2022-29883?
CVE-2022-29883 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-29883?
Check the references section above for vendor advisories and patch information. Affected products include: Siemens 7Kg8500-0Aa00-0Aa0 Firmware, Siemens 7Kg8500-0Aa00-0Aa0, Siemens 7Kg8500-0Aa00-2Aa0 Firmware, Siemens 7Kg8500-0Aa00-2Aa0, Siemens 7Kg8500-0Aa10-0Aa0 Firmware.