7Kg8500 0Aa00 0Aa0 Firmware CVE-2022-29880

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2022-05-20 productcert@siemens.com

XSS 7Kg8500 0Aa00 0Aa0 Firmware 7Kg8500 0Aa00 2Aa0 Firmware 7Kg8500 0Aa10 0Aa0 Firmware 7Kg8500 0Aa10 2Aa0 Firmware 7Kg8500 0Aa30 0Aa0 Firmware 7Kg8500 0Aa30 2Aa0 Firmware 7Kg8501 0Aa01 0Aa0 Firmware 7Kg8501 0Aa01 2Aa0 Firmware 7Kg8501 0Aa02 0Aa0 Firmware 7Kg8501 0Aa02 2Aa0 Firmware 7Kg8501 0Aa11 0Aa0 Firmware 7Kg8501 0Aa11 2Aa0 Firmware 7Kg8501 0Aa12 0Aa0 Firmware 7Kg8501 0Aa12 2Aa0 Firmware 7Kg8501 0Aa31 0Aa0 Firmware 7Kg8501 0Aa31 2Aa0 Firmware 7Kg8501 0Aa32 0Aa0 Firmware 7Kg8501 0Aa32 2Aa0 Firmware 7Kg8550 0Aa00 0Aa0 Firmware 7Kg8550 0Aa00 2Aa0 Firmware 7Kg8550 0Aa10 0Aa0 Firmware 7Kg8550 0Aa10 2Aa0 Firmware 7Kg8550 0Aa30 0Aa0 Firmware 7Kg8550 0Aa30 2Aa0 Firmware 7Kg8551 0Aa01 0Aa0 Firmware 7Kg8551 0Aa01 2Aa0 Firmware 7Kg8551 0Aa02 0Aa0 Firmware 7Kg8551 0Aa02 2Aa0 Firmware 7Kg8551 0Aa11 0Aa0 Firmware 7Kg8551 0Aa11 2Aa0 Firmware 7Kg8551 0Aa12 0Aa0 Firmware 7Kg8551 0Aa12 2Aa0 Firmware 7Kg8551 0Aa31 0Aa0 Firmware 7Kg8551 0Aa31 2Aa0 Firmware 7Kg8551 0Aa32 0Aa0 Firmware 7Kg8551 0Aa32 2Aa0 Firmware

6.5

CVSS 3.1 · Vendor: siemens

Share

Severity by source

Vendor (siemens) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Primary rating from Vendor (siemens) · only source for this CVE.

CVSS VectorVendor: siemens

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

1

CVE Published

May 20, 2022 - 13:15 cve.org

MEDIUM 6.5

DescriptionCVE.org

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.

AnalysisAI

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views. Affected products include: Siemens 7Kg8500-0Aa00-0Aa0 Firmware, Siemens 7Kg8500-0Aa00-2Aa0 Firmware, Siemens 7Kg8500-0Aa10-0Aa0 Firmware, Siemens 7Kg8500-0Aa10-2Aa0 Firmware, Siemens 7Kg8500-0Aa30-0Aa0 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.

More in 7Kg8500 0Aa00 0Aa0 Firmware

View all

CVE-2022-29873 CRITICAL Act Now

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated critical severity (CVSS 9.3), this vulnerabi

CVE-2022-41665 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29874 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-29872 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.7), this vulnerability

CVE-2022-40226 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29878 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.5), this vulnerability

CVE-2022-29882 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29876 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29883 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerabili

CVE-2022-29881 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerabili

CVE-2022-29877 MEDIUM This Month

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850

CVE-2022-29879 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 5.3), this vulnerabili

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2016-8581 MEDIUM POC

CVE-2013-5223 MEDIUM POC

CVE-2025-52367 MEDIUM POC

CVE-2015-0072 MEDIUM POC

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

CVE-2013-1710 CRITICAL POC

CVE-2013-7389 MEDIUM POC

CVE-2021-25299 MEDIUM POC

CVE-2014-2120 MEDIUM

CVE-2023-40000 HIGH POC

CVE-2024-52875 HIGH POC

CVE-2016-8581 MEDIUM POC

Share

CVE-2022-29880 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy