Medium SSA-225578 1 CVE

SSA-225578: Improper Access Control Vulnerability in SICAM GridEdge Before V2.7.3

Published Jul 12, 2022 · Updated Nov 11, 2025 · Revision 2

Vendor: Siemens Product: SICAM GridEdge (Classic)

Summary

SICAM GridEdge contains an improper access control vulnerability. This could allow persons with local access to the host system to inject an SSH key.

Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest version.

Vulnerabilities 1

Medium 6.3

CVE-2022-34464

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses …

Siemens SICAM GridEdge (Classic) ICS / OT

Jul 12, 2022

Revision history

2025-11-11 #2
Updated SSA to current data model and support of csaf; removed software-license based MLFB information; added CVSSv4 vector; changed CWE id from CWE-668 to CWE-552
2022-07-12 #1
Publication Date

References

SSA-225578: Improper Access Control Vulnerability in SICAM GridEdge Before V2.7.3 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-225578.html