Summary
Multiple vulnerabilities were identified in the web server of the SICAM GridEdge application which includes missing authentication for critical API functions, absent cross-origin resource sharing restrictions and access to credentials.
Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest version.
Vulnerabilities 4
-
Critical 9.8
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …
-
High 8.8
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not…
-
High 7.2
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …
-
Medium 4.9
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discl…
Revision history
-
#2
Updated SSA to current data model and support of csaf; removed software-license based MLFB information; revised CVSSv3.1 vectors and added CVSSv4 vectors
-
#1
Publication Date
References
-
SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-631336.html