CVE-2022-29872

Published: May 20, 2022Modified: Jun 17, 2026

8.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Affected (36)

Siemens

36 products

7kg8500 0aa00 0aa0 Firmware

7kg8500 0aa00 2aa0 Firmware

7kg8500 0aa10 0aa0 Firmware

7kg8500 0aa10 2aa0 Firmware

7kg8500 0aa30 0aa0 Firmware

7kg8500 0aa30 2aa0 Firmware

7kg8501 0aa01 0aa0 Firmware

7kg8501 0aa01 2aa0 Firmware

7kg8501 0aa02 0aa0 Firmware

7kg8501 0aa02 2aa0 Firmware

7kg8501 0aa11 0aa0 Firmware

7kg8501 0aa11 2aa0 Firmware

7kg8501 0aa12 0aa0 Firmware

7kg8501 0aa12 2aa0 Firmware

7kg8501 0aa31 0aa0 Firmware

7kg8501 0aa31 2aa0 Firmware

7kg8501 0aa32 0aa0 Firmware

7kg8501 0aa32 2aa0 Firmware

7kg8550 0aa00 0aa0 Firmware

7kg8550 0aa00 2aa0 Firmware

7kg8550 0aa10 0aa0 Firmware

7kg8550 0aa10 2aa0 Firmware

7kg8550 0aa30 0aa0 Firmware

7kg8550 0aa30 2aa0 Firmware

7kg8551 0aa01 0aa0 Firmware

7kg8551 0aa01 2aa0 Firmware

7kg8551 0aa02 0aa0 Firmware

7kg8551 0aa02 2aa0 Firmware

7kg8551 0aa11 0aa0 Firmware

7kg8551 0aa11 2aa0 Firmware

7kg8551 0aa12 0aa0 Firmware

7kg8551 0aa12 2aa0 Firmware

7kg8551 0aa31 0aa0 Firmware

7kg8551 0aa31 2aa0 Firmware

7kg8551 0aa32 0aa0 Firmware

7kg8551 0aa32 2aa0 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 2aa0	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 0aa0	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 2aa0	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 0aa0	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 2aa0	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 0aa0	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 2aa0	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 0aa0	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 2aa0	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 0aa0	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 2aa0	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 0aa0	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 2aa0	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 0aa0	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 2aa0	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 0aa0	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 2aa0	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 2aa0	All versions

Related CWEs

CWE-141

Improper Neutralization of Parameter/Argument Delimiters

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as parameter or argument delimiters when they are sent to a downstream component.

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

https://cert-portal.siemens.com/productcert/html/ssa-165073.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-471761.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.