153 matches found
Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices have an unspecified vulnerability
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Cross-Site Scripting Vulnerability (CNVD-2022-36389)
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Sensitive Information Explicit Transmission Vulnerability
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability (CNVD-2022-36392)
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Cross-Site Scripting Vulnerability
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Incorrect Authentication Vulnerability
The SICAM P850 Multifunctional Measuring Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured electrica...
Siemens SICAM P850 and SICAM P855 Devices Bypass Authentication Vulnerability
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Cross-Site Scripting Vulnerability (CNVD-2022-36391)
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
Siemens SICAM P850 and SICAM P855 Devices Authentication Vulnerability (CNVD-2022-36390)
The SICAM P850 Multifunctional Measurement Device is used to collect, visualize, evaluate and transmit electrical measurement variables such as AC current, AC voltage, frequency, power, harmonics, etc. The SICAM P855 Multifunctional Device is used to collect, display and transmit measured...
CVE-2022-29883
CVE-2022-29883 affects Siemens SICAM P850 and SICAM P855 (and related SICAM devices in some advisories) with an improper authentication flaw that allows unauthenticated access to parts of the web interface, potentially enabling deletion of log files. Connected sources reference affected versions ...
CVE-2022-29882
CVE-2022-29882 affects Siemens SICAM T (all versions
CVE-2022-29882
A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary...
CVE-2022-29881
A vulnerability has been identified in SICAM T All versions V3.0. The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details...
CVE-2022-29881
CVE-2022-29881 affects Siemens SICAM P850 and SICAM P855 (all versions prior to V3.0). The web-based management interface does not enforce authentication for certain internal developer views, potentially allowing an unauthenticated attacker to extract internal configuration details. Affected prod...
CVE-2022-29880
A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the...
CVE-2022-29880
CVE-2022-29880 affects Siemens SICAM devices (e.g., SICAM T <3.0; SICAM P850/P855
CVE-2022-29879
A vulnerability has been identified in SICAM T All versions V3.0. The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information...
CVE-2022-29879
CVE-2022-29879 affects Siemens SICAM P850 and SICAM P855 hardware (all versions prior to v3.0). The issue is Missing Authentication for Critical Function in the web-based management interface, allowing an authenticated user to access critical device information via internal developer views. Affec...
CVE-2022-29878
A vulnerability has been identified in SICAM T All versions V3.0. Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-response pair generated by a legitimate user, an...