Critical ICSA-22-167-08 4 CVEs

Siemens SICAM GridEdge

Published Jun 14, 2022 · Updated Nov 11, 2025 · Revision 2

Vendor: Siemens Product: SICAM GridEdge (Classic)

Summary

Multiple vulnerabilities were identified in the web server of the SICAM GridEdge application which includes missing authentication for critical API functions, absent cross-origin resource sharing restrictions and access to credentials.

Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest version.

Vulnerabilities 4

Critical 9.8

CVE-2022-30230

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …

Siemens SICAM GridEdge (Classic) ICS / OT

Jun 14, 2022
High 8.8

CVE-2022-30228

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not…

Siemens SICAM GridEdge (Classic) ICS / OT

Jun 14, 2022
High 7.2

CVE-2022-30229

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …

Siemens SICAM GridEdge (Classic) ICS / OT

Jun 14, 2022
Medium 4.9

CVE-2022-30231

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discl…

Siemens SICAM GridEdge (Classic) ICS / OT

Jun 14, 2022

Revision history

2025-11-11 #2
Updated SSA to current data model and support of csaf; removed software-license based MLFB information; revised CVSSv3.1 vectors and added CVSSv4 vectors
2022-06-14 #1
Publication Date

References

SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-631336.html
ICS Advisory ICSA-22-167-08 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-167-08
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b