Lucene search

[email protected]NVD:CVE-2022-29880

HistoryMay 20, 2022 - 1:15 p.m.

CVE-2022-29880

2022-05-2013:15:16

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

sicam p850

sicam p855

input validation

xss

authenticated attacker

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.7%

JSON

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.

Affected configurations

Nvd

Node

siemens7kg8500-0aa00-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa00-0aa0Match-

Node

siemens7kg8500-0aa00-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa00-2aa0Match-

Node

siemens7kg8500-0aa10-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa10-0aa0Match-

Node

siemens7kg8500-0aa10-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa10-2aa0Match-

Node

siemens7kg8500-0aa30-0aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa30-0aa0Match-

Node

siemens7kg8500-0aa30-2aa0_firmwareRange<3.00

AND

siemens7kg8500-0aa30-2aa0Match-

Node

siemens7kg8501-0aa01-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa01-0aa0Match-

Node

siemens7kg8501-0aa01-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa01-2aa0Match-

Node

siemens7kg8501-0aa02-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa02-0aa0Match-

Node

siemens7kg8501-0aa02-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa02-2aa0Match-

Node

siemens7kg8501-0aa11-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa11-0aa0Match-

Node

siemens7kg8501-0aa11-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa11-2aa0Match-

Node

siemens7kg8501-0aa12-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa12-0aa0Match-

Node

siemens7kg8501-0aa12-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa12-2aa0Match-

Node

siemens7kg8501-0aa31-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa31-0aa0Match-

Node

siemens7kg8501-0aa31-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa31-2aa0Match-

Node

siemens7kg8501-0aa32-0aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa32-0aa0Match-

Node

siemens7kg8501-0aa32-2aa0_firmwareRange<3.00

AND

siemens7kg8501-0aa32-2aa0Match-

Node

siemens7kg8550-0aa00-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa00-0aa0Match-

Node

siemens7kg8550-0aa00-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa00-2aa0Match-

Node

siemens7kg8550-0aa10-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa10-0aa0Match-

Node

siemens7kg8550-0aa10-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa10-2aa0Match-

Node

siemens7kg8550-0aa30-0aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa30-0aa0Match-

Node

siemens7kg8550-0aa30-2aa0_firmwareRange<3.00

AND

siemens7kg8550-0aa30-2aa0Match-

Node

siemens7kg8551-0aa01-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa01-0aa0Match-

Node

siemens7kg8551-0aa01-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa01-2aa0Match-

Node

siemens7kg8551-0aa02-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa02-0aa0Match-

Node

siemens7kg8551-0aa02-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa02-2aa0Match-

Node

siemens7kg8551-0aa11-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa11-0aa0Match-

Node

siemens7kg8551-0aa11-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa11-2aa0Match-

Node

siemens7kg8551-0aa12-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa12-0aa0Match-

Node

siemens7kg8551-0aa12-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa12-2aa0Match-

Node

siemens7kg8551-0aa31-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa31-0aa0Match-

Node

siemens7kg8551-0aa31-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa31-2aa0Match-

Node

siemens7kg8551-0aa32-0aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa32-0aa0Match-

Node

siemens7kg8551-0aa32-2aa0_firmwareRange<3.00

AND

siemens7kg8551-0aa32-2aa0Match-

VendorProductVersionCPE
siemens7kg8500-0aa00-0aa0_firmware*cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*
siemens7kg8500-0aa00-0aa0-cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:*:*:*:*:*:*:*
siemens7kg8500-0aa00-2aa0_firmware*cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*
siemens7kg8500-0aa00-2aa0-cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:*:*:*:*:*:*:*
siemens7kg8500-0aa10-0aa0_firmware*cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*
siemens7kg8500-0aa10-0aa0-cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:*:*:*:*:*:*:*
siemens7kg8500-0aa10-2aa0_firmware*cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*
siemens7kg8500-0aa10-2aa0-cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:*:*:*:*:*:*:*
siemens7kg8500-0aa30-0aa0_firmware*cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*
siemens7kg8500-0aa30-0aa0-cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
siemens	7kg8500-0aa00-0aa0_firmware	*	cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware::::::::
siemens	7kg8500-0aa00-0aa0	-	cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:::::::*
siemens	7kg8500-0aa00-2aa0_firmware	*	cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware::::::::
siemens	7kg8500-0aa00-2aa0	-	cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:::::::*
siemens	7kg8500-0aa10-0aa0_firmware	*	cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware::::::::
siemens	7kg8500-0aa10-0aa0	-	cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:::::::*
siemens	7kg8500-0aa10-2aa0_firmware	*	cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware::::::::
siemens	7kg8500-0aa10-2aa0	-	cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:::::::*
siemens	7kg8500-0aa30-0aa0_firmware	*	cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware::::::::
siemens	7kg8500-0aa30-0aa0	-	cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:::::::*

Rows per page:

1-10 of 721

References

cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

22.7%

JSON

Related for NVD:CVE-2022-29880

cvelist1 nessus1 cve1 prion1 ics1