Skip to content
OpenAdvisories
High WID-SEC-2025-2767 11 CVEs

Siemens SICAM: Mehrere Schwachstellen

Published May 9, 2022 · Updated Dec 8, 2025 · Revision 2 · de-DE

Vendor: Siemens Product: SICAM

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting Angriff durchzuführen.

Product

Siemens SICAM ist eine Produktfamilie von SCADA-Systemen für den Betrieb von industriellen Prozessen.

Vulnerabilities 11

  • Critical 9.8
    CVE-2022-29873

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…

    Siemens SICAM T ICS / OT
  • High 8.8
    CVE-2022-29872

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate paramet…

    Siemens SICAM T ICS / OT
  • High 8.8
    CVE-2022-29874

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with …

    Siemens SICAM T ICS / OT
  • High 7.5
    CVE-2022-29878

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challeng…

    Siemens SICAM T ICS / OT
  • High 7.1
    CVE-2022-29876

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input…

    Siemens SICAM T ICS / OT
  • High 7.1
    CVE-2022-29882

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files cor…

    Siemens SICAM T ICS / OT
  • Medium 6.5
    CVE-2022-29880

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input i…

    Siemens SICAM T ICS / OT
  • Medium 5.3
    CVE-2022-29881

    A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…

    Siemens SICAM T ICS / OT
  • Medium 5.3
    CVE-2022-29883

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated …

    Siemens SICAM T ICS / OT
  • Medium 4.3
    CVE-2022-29879

    A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected de…

    Siemens SICAM T ICS / OT
  • Unscored —
    CVE-2022-29877

    A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850…

    Siemens SICAM P855 SICAM P850 ICS / OT

Revision history

  1. #2

    Neue Updates von Siemens aufgenommen

  2. #1

    Initiale Fassung

References