CVE-2022-29876

Published: May 20, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD (Secondary)

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.

Affected (36)

Siemens

36 products

7kg8500 0aa00 0aa0 Firmware

7kg8500 0aa00 2aa0 Firmware

7kg8500 0aa10 0aa0 Firmware

7kg8500 0aa10 2aa0 Firmware

7kg8500 0aa30 0aa0 Firmware

7kg8500 0aa30 2aa0 Firmware

7kg8501 0aa01 0aa0 Firmware

7kg8501 0aa01 2aa0 Firmware

7kg8501 0aa02 0aa0 Firmware

7kg8501 0aa02 2aa0 Firmware

7kg8501 0aa11 0aa0 Firmware

7kg8501 0aa11 2aa0 Firmware

7kg8501 0aa12 0aa0 Firmware

7kg8501 0aa12 2aa0 Firmware

7kg8501 0aa31 0aa0 Firmware

7kg8501 0aa31 2aa0 Firmware

7kg8501 0aa32 0aa0 Firmware

7kg8501 0aa32 2aa0 Firmware

7kg8550 0aa00 0aa0 Firmware

7kg8550 0aa00 2aa0 Firmware

7kg8550 0aa10 0aa0 Firmware

7kg8550 0aa10 2aa0 Firmware

7kg8550 0aa30 0aa0 Firmware

7kg8550 0aa30 2aa0 Firmware

7kg8551 0aa01 0aa0 Firmware

7kg8551 0aa01 2aa0 Firmware

7kg8551 0aa02 0aa0 Firmware

7kg8551 0aa02 2aa0 Firmware

7kg8551 0aa11 0aa0 Firmware

7kg8551 0aa11 2aa0 Firmware

7kg8551 0aa12 0aa0 Firmware

7kg8551 0aa12 2aa0 Firmware

7kg8551 0aa31 0aa0 Firmware

7kg8551 0aa31 2aa0 Firmware

7kg8551 0aa32 0aa0 Firmware

7kg8551 0aa32 2aa0 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 2aa0	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 0aa0	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 2aa0	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 0aa0	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 2aa0	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 0aa0	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 2aa0	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 0aa0	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 2aa0	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 0aa0	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 2aa0	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 0aa0	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 2aa0	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 0aa0	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 2aa0	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 0aa0	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 2aa0	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 2aa0	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://cert-portal.siemens.com/productcert/html/ssa-165073.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-471761.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.