Skip to content
OpenAdvisories
Critical SSA-165073 11 CVEs

SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices

Published May 10, 2022 · Updated May 10, 2022

Vendor: Siemens Product: SICAM P850 Product: SICAM P855

Summary

Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 11

  • Critical 9.8
    CVE-2022-29873

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…

    Siemens SICAM T ICS / OT
  • High 8.8
    CVE-2022-29872

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…

    Siemens SICAM T ICS / OT
  • High 8.8
    CVE-2022-29874

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with …

    Siemens SICAM T ICS / OT
  • High 7.5
    CVE-2022-29878

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challeng…

    Siemens SICAM T ICS / OT
  • High 7.1
    CVE-2022-29876

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input…

    Siemens SICAM T ICS / OT
  • High 7.1
    CVE-2022-29882

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files cor…

    Siemens SICAM T ICS / OT
  • Medium 6.5
    CVE-2022-29880

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input i…

    Siemens SICAM T ICS / OT
  • Medium 5.3
    CVE-2022-29881

    A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…

    Siemens SICAM T ICS / OT
  • Medium 5.3
    CVE-2022-29883

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated …

    Siemens SICAM T ICS / OT
  • Medium 4.3
    CVE-2022-29879

    A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…

    Siemens SICAM T ICS / OT
  • Unscored —
    CVE-2022-29877

    A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850…

    Siemens SICAM P855 SICAM P850 ICS / OT

Revision history

  1. #1

    Publication Date

References