7Kg8500 0Aa00 0Aa0 Firmware CVE-2022-29881

MEDIUM

Missing Authentication for Critical Function (CWE-306)

2022-05-20 productcert@siemens.com

Authentication Bypass 7Kg8500 0Aa00 0Aa0 Firmware 7Kg8500 0Aa00 2Aa0 Firmware 7Kg8500 0Aa10 0Aa0 Firmware 7Kg8500 0Aa10 2Aa0 Firmware 7Kg8500 0Aa30 0Aa0 Firmware 7Kg8500 0Aa30 2Aa0 Firmware 7Kg8501 0Aa01 0Aa0 Firmware 7Kg8501 0Aa01 2Aa0 Firmware 7Kg8501 0Aa02 0Aa0 Firmware 7Kg8501 0Aa02 2Aa0 Firmware 7Kg8501 0Aa11 0Aa0 Firmware 7Kg8501 0Aa11 2Aa0 Firmware 7Kg8501 0Aa12 0Aa0 Firmware 7Kg8501 0Aa12 2Aa0 Firmware 7Kg8501 0Aa31 0Aa0 Firmware 7Kg8501 0Aa31 2Aa0 Firmware 7Kg8501 0Aa32 0Aa0 Firmware 7Kg8501 0Aa32 2Aa0 Firmware 7Kg8550 0Aa00 0Aa0 Firmware 7Kg8550 0Aa00 2Aa0 Firmware 7Kg8550 0Aa10 0Aa0 Firmware 7Kg8550 0Aa10 2Aa0 Firmware 7Kg8550 0Aa30 0Aa0 Firmware 7Kg8550 0Aa30 2Aa0 Firmware 7Kg8551 0Aa01 0Aa0 Firmware 7Kg8551 0Aa01 2Aa0 Firmware 7Kg8551 0Aa02 0Aa0 Firmware 7Kg8551 0Aa02 2Aa0 Firmware 7Kg8551 0Aa11 0Aa0 Firmware 7Kg8551 0Aa11 2Aa0 Firmware 7Kg8551 0Aa12 0Aa0 Firmware 7Kg8551 0Aa12 2Aa0 Firmware 7Kg8551 0Aa31 0Aa0 Firmware 7Kg8551 0Aa31 2Aa0 Firmware 7Kg8551 0Aa32 0Aa0 Firmware 7Kg8551 0Aa32 2Aa0 Firmware

6.9

CVSS 4.0 · Vendor: siemens

Share

Severity by source

Vendor (siemens) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (siemens) · only source for this CVE.

CVSS VectorVendor: siemens

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

X

Lifecycle Timeline

1

CVE Published

May 20, 2022 - 13:15 cve.org

MEDIUM 6.9

DescriptionCVE.org

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.

AnalysisAI

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details. Affected products include: Siemens 7Kg8500-0Aa00-0Aa0 Firmware, Siemens 7Kg8500-0Aa00-2Aa0 Firmware, Siemens 7Kg8500-0Aa10-0Aa0 Firmware, Siemens 7Kg8500-0Aa10-2Aa0 Firmware, Siemens 7Kg8500-0Aa30-0Aa0 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Require authentication for all sensitive operations, implement defense in depth.

More in 7Kg8500 0Aa00 0Aa0 Firmware

View all

CVE-2022-29873 CRITICAL Act Now

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated critical severity (CVSS 9.3), this vulnerabi

CVE-2022-41665 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29874 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-29872 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.7), this vulnerability

CVE-2022-40226 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29878 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.5), this vulnerability

CVE-2022-29882 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29876 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29883 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerabili

CVE-2022-29880 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.5), this vulnerabili

CVE-2022-29877 MEDIUM This Month

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850

CVE-2022-29879 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 5.3), this vulnerabili

Same weakness CWE-306 – Missing Authentication for Critical Function

View all

CVE-2017-10271 HIGH POC

CVE-2025-3248 CRITICAL POC

CVE-2024-11680 CRITICAL POC

CVE-2025-0108 HIGH POC

CVE-2025-32433 CRITICAL POC

CVE-2016-2004 CRITICAL POC

CVE-2024-46506 CRITICAL POC

CVE-2025-8943 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2022-29881 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy