Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM GridEdge (Classic) | < V2.6.6 | V2.6.6 |
Advisories 2
- ICSA-22-167-08 Siemens SICAM GridEdge CISA ICS & IT advisories · Nov 11, 2025
- SSA-631336 SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 Siemens ProductCERT · Nov 11, 2025