Lucene search

[email protected]CVE-2022-29883

HistoryMay 20, 2022 - 1:15 p.m.

CVE-2022-29883

2022-05-2013:15:16

CWE-306

CWE-287

[email protected]

web.nvd.nist.gov

cve-2022-29883

vulnerability

sicam p850

sicam p855

unauthenticated access

web interface

log files

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

Affected configurations

NVD

Node

siemens7kg8500-0aa00-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa00-0aa0Match-

Node

siemens7kg8500-0aa00-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa00-2aa0Match-

Node

siemens7kg8500-0aa10-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa10-0aa0Match-

Node

siemens7kg8500-0aa10-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa10-2aa0Match-

Node

siemens7kg8500-0aa30-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa30-0aa0Match-

Node

siemens7kg8500-0aa30-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa30-2aa0Match-

Node

siemens7kg8501-0aa01-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa01-0aa0Match-

Node

siemens7kg8501-0aa01-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa01-2aa0Match-

Node

siemens7kg8501-0aa02-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa02-0aa0Match-

Node

siemens7kg8501-0aa02-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa02-2aa0Match-

Node

siemens7kg8501-0aa11-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa11-0aa0Match-

Node

siemens7kg8501-0aa11-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa11-2aa0Match-

Node

siemens7kg8501-0aa12-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa12-0aa0Match-

Node

siemens7kg8501-0aa12-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa12-2aa0Match-

Node

siemens7kg8501-0aa31-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa31-0aa0Match-

Node

siemens7kg8501-0aa31-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa31-2aa0Match-

Node

siemens7kg8501-0aa32-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa32-0aa0Match-

Node

siemens7kg8501-0aa32-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa32-2aa0Match-

Node

siemens7kg8550-0aa00-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa00-0aa0Match-

Node

siemens7kg8550-0aa00-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa00-2aa0Match-

Node

siemens7kg8550-0aa10-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa10-0aa0Match-

Node

siemens7kg8550-0aa10-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa10-2aa0Match-

Node

siemens7kg8550-0aa30-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa30-0aa0Match-

Node

siemens7kg8550-0aa30-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa30-2aa0Match-

Node

siemens7kg8551-0aa01-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa01-0aa0Match-

Node

siemens7kg8551-0aa01-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa01-2aa0Match-

Node

siemens7kg8551-0aa02-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa02-0aa0Match-

Node

siemens7kg8551-0aa02-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa02-2aa0Match-

Node

siemens7kg8551-0aa11-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa11-0aa0Match-

Node

siemens7kg8551-0aa11-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa11-2aa0Match-

Node

siemens7kg8551-0aa12-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa12-0aa0Match-

Node

siemens7kg8551-0aa12-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa12-2aa0Match-

Node

siemens7kg8551-0aa31-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa31-0aa0Match-

Node

siemens7kg8551-0aa31-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa31-2aa0Match-

Node

siemens7kg8551-0aa32-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa32-0aa0Match-

Node

siemens7kg8551-0aa32-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa32-2aa0Match-

CPENameOperatorVersion
siemens:7kg8500-0aa00-0aa0_firmwaresiemens 7kg8500-0aa00-0aa0 firmwarelt3.00

CPE	Name	Operator	Version
siemens:7kg8500-0aa00-0aa0_firmware	siemens 7kg8500-0aa00-0aa0 firmware	lt	3.00

CNA Affected

[
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P850",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  },
  {
    "product": "SICAM P855",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.00"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Related for CVE-2022-29883

nessus1 nvd1 prion1 cvelist1 ics1