CVE-2022-29876

A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks...

Siemens SICAM P850 and SICAM P855 Improper Neutralization of Input During Web Page Generation (CVE-2022-29876)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker t...

CVE-2022-29876

The CVE-2022-29876 entry affects Siemens SICAM P850 and SICAM P855 devices (and related advisories reference SICAM T) with a vulnerability described as improper input handling for GET request parameters that are reflected in the web server response, enabling reflected XSS. Affected products are l...