CVE-2022-29879

Published: May 20, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: productcert@siemens.com (Secondary)

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.

Affected (36)

Siemens

36 products

7kg8500 0aa00 0aa0 Firmware

7kg8500 0aa00 2aa0 Firmware

7kg8500 0aa10 0aa0 Firmware

7kg8500 0aa10 2aa0 Firmware

7kg8500 0aa30 0aa0 Firmware

7kg8500 0aa30 2aa0 Firmware

7kg8501 0aa01 0aa0 Firmware

7kg8501 0aa01 2aa0 Firmware

7kg8501 0aa02 0aa0 Firmware

7kg8501 0aa02 2aa0 Firmware

7kg8501 0aa11 0aa0 Firmware

7kg8501 0aa11 2aa0 Firmware

7kg8501 0aa12 0aa0 Firmware

7kg8501 0aa12 2aa0 Firmware

7kg8501 0aa31 0aa0 Firmware

7kg8501 0aa31 2aa0 Firmware

7kg8501 0aa32 0aa0 Firmware

7kg8501 0aa32 2aa0 Firmware

7kg8550 0aa00 0aa0 Firmware

7kg8550 0aa00 2aa0 Firmware

7kg8550 0aa10 0aa0 Firmware

7kg8550 0aa10 2aa0 Firmware

7kg8550 0aa30 0aa0 Firmware

7kg8550 0aa30 2aa0 Firmware

7kg8551 0aa01 0aa0 Firmware

7kg8551 0aa01 2aa0 Firmware

7kg8551 0aa02 0aa0 Firmware

7kg8551 0aa02 2aa0 Firmware

7kg8551 0aa11 0aa0 Firmware

7kg8551 0aa11 2aa0 Firmware

7kg8551 0aa12 0aa0 Firmware

7kg8551 0aa12 2aa0 Firmware

7kg8551 0aa31 0aa0 Firmware

7kg8551 0aa31 2aa0 Firmware

7kg8551 0aa32 0aa0 Firmware

7kg8551 0aa32 2aa0 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa00 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa10 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8500 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8500 0aa30 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa01 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa02 2aa0	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 0aa0	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa11 2aa0	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 0aa0	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa12 2aa0	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 0aa0	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa31 2aa0	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 0aa0	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8501 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8501 0aa32 2aa0	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 0aa0	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa00 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa00 2aa0	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 0aa0	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa10 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa10 2aa0	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 0aa0	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8550 0aa30 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8550 0aa30 2aa0	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 0aa0	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa01 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa01 2aa0	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 0aa0	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa02 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa02 2aa0	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 0aa0	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa11 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa11 2aa0	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 0aa0	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa12 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa12 2aa0	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 0aa0	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa31 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa31 2aa0	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 0aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 0aa0	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens 7kg8551 0aa32 2aa0 Firmware	Before 3.00

Running on/with	Platform Versions
Siemens 7kg8551 0aa32 2aa0	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

https://cert-portal.siemens.com/productcert/html/ssa-165073.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-471761.html

Source: productcert@siemens.com

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.