Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM GridEdge (Classic) | < V2.6.6 | V2.6.6 |
Advisories 2
- ICSA-22-167-08 Siemens SICAM GridEdge CISA ICS & IT advisories · Nov 11, 2025
- SSA-631336 SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 Siemens ProductCERT · Nov 11, 2025