7Kg8500 0Aa00 0Aa0 Firmware CVE-2022-29883

MEDIUM

Improper Authentication (CWE-287)

2022-05-20 productcert@siemens.com

Authentication Bypass 7Kg8500 0Aa00 0Aa0 Firmware 7Kg8500 0Aa00 2Aa0 Firmware 7Kg8500 0Aa10 0Aa0 Firmware 7Kg8500 0Aa10 2Aa0 Firmware 7Kg8500 0Aa30 0Aa0 Firmware 7Kg8500 0Aa30 2Aa0 Firmware 7Kg8501 0Aa01 0Aa0 Firmware 7Kg8501 0Aa01 2Aa0 Firmware 7Kg8501 0Aa02 0Aa0 Firmware 7Kg8501 0Aa02 2Aa0 Firmware 7Kg8501 0Aa11 0Aa0 Firmware 7Kg8501 0Aa11 2Aa0 Firmware 7Kg8501 0Aa12 0Aa0 Firmware 7Kg8501 0Aa12 2Aa0 Firmware 7Kg8501 0Aa31 0Aa0 Firmware 7Kg8501 0Aa31 2Aa0 Firmware 7Kg8501 0Aa32 0Aa0 Firmware 7Kg8501 0Aa32 2Aa0 Firmware 7Kg8550 0Aa00 0Aa0 Firmware 7Kg8550 0Aa00 2Aa0 Firmware 7Kg8550 0Aa10 0Aa0 Firmware 7Kg8550 0Aa10 2Aa0 Firmware 7Kg8550 0Aa30 0Aa0 Firmware 7Kg8550 0Aa30 2Aa0 Firmware 7Kg8551 0Aa01 0Aa0 Firmware 7Kg8551 0Aa01 2Aa0 Firmware 7Kg8551 0Aa02 0Aa0 Firmware 7Kg8551 0Aa02 2Aa0 Firmware 7Kg8551 0Aa11 0Aa0 Firmware 7Kg8551 0Aa11 2Aa0 Firmware 7Kg8551 0Aa12 0Aa0 Firmware 7Kg8551 0Aa12 2Aa0 Firmware 7Kg8551 0Aa31 0Aa0 Firmware 7Kg8551 0Aa31 2Aa0 Firmware 7Kg8551 0Aa32 0Aa0 Firmware 7Kg8551 0Aa32 2Aa0 Firmware

6.9

CVSS 4.0 · Vendor: siemens

Share

Severity by source

Vendor (siemens) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (siemens) · only source for this CVE.

CVSS VectorVendor: siemens

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

X

Lifecycle Timeline

1

CVE Published

May 20, 2022 - 13:15 cve.org

MEDIUM 6.9

DescriptionCVE.org

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

AnalysisAI

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication. Affected products include: Siemens 7Kg8500-0Aa00-0Aa0 Firmware, Siemens 7Kg8500-0Aa00-2Aa0 Firmware, Siemens 7Kg8500-0Aa10-0Aa0 Firmware, Siemens 7Kg8500-0Aa10-2Aa0 Firmware, Siemens 7Kg8500-0Aa30-0Aa0 Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.

More in 7Kg8500 0Aa00 0Aa0 Firmware

View all

CVE-2022-29873 CRITICAL Act Now

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated critical severity (CVSS 9.3), this vulnerabi

CVE-2022-41665 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29874 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.8), this vulnerability

CVE-2022-29872 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 8.7), this vulnerability

CVE-2022-40226 HIGH This Week

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00

CVE-2022-29878 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.5), this vulnerability

CVE-2022-29882 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29876 HIGH This Week

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated high severity (CVSS 7.1), this vulnerability

CVE-2022-29881 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.9), this vulnerabili

CVE-2022-29880 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 6.5), this vulnerabili

CVE-2022-29877 MEDIUM This Month

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850

CVE-2022-29879 MEDIUM This Month

A vulnerability has been identified in SICAM T (All versions < V3.0). Rated medium severity (CVSS 5.3), this vulnerabili

Same weakness CWE-287 – Improper Authentication

View all

CVE-2020-0688 HIGH POC

CVE-2023-46805 HIGH POC

CVE-2015-1187 CRITICAL POC

CVE-2024-7593 CRITICAL POC

CVE-2017-7921 CRITICAL POC

CVE-2024-53704 CRITICAL POC

CVE-2015-7755 CRITICAL POC

CVE-2013-0625 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2022-29883 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy