Siemens SICAM P850 and SICAM P855 Authentication Bypass By Capture-Replay (CVE-2022-29878)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair...

CVE-2022-29878

creationtimestamp| type| source ---|---|--- 2022-05-20 16:30:44+00:00| seen| https://t.me/cibsecurity/43037...

CVE-2022-29878

The CVE-2022-29878 vulnerability affects Siemens SICAM P850/P855 (and referenced SICAM T in related records) where the unencrypted challenge-response uses a limited challenge range. An unauthenticated attacker can capture a valid challenge-response pair and repeatedly request the page, waiting fo...