Description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM T | < V3.0 | V3.0 |
Advisories 5
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- SSA-471761 SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.0 Siemens ProductCERT · Dec 9, 2025
- WID-SEC-2025-2767 Siemens SICAM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 8, 2025
- ICSA-22-132-07 Siemens SICAM P850 and SICAM P855 CISA ICS & IT advisories · May 6, 2025
- SSA-165073 SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices Siemens ProductCERT · May 10, 2022