CVE-2022-29883 - A vulnerability has been identified in SICAM T (All versions < V3.0)

Back Back to CVE browser

MEDIUM

A vulnerability has been identified in SICAM T (All versions < V3.0)

Published May 10, 2022

6.9

MEDIUM

CVSS 4.0

EPSS 1.05%

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

Affected products

Vendor Siemens Product Sicam T Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Sicam T

n/a

Version	Status	Constraints
0	affected	<V3.0

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-306

Missing Authentication

References (3)

https://cert-portal.siemens.com/productcert/html/ssa-165073.html
https://cert-portal.siemens.com/productcert/html/ssa-471761.html
https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-165073.html
https://cert-portal.siemens.com/productcert/html/ssa-471761.html
https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf		x_refsource_MISCPatchVendor Advisory