Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SICAM GridEdge (Classic) | < V2.6.6 | V2.6.6 |
Advisories 2
- ICSA-22-167-08 Siemens SICAM GridEdge CISA ICS & IT advisories · Nov 11, 2025
- SSA-631336 SSA-631336: Multiple Web Server Vulnerabilities in SICAM GridEdge Before V2.6.6 Siemens ProductCERT · Nov 11, 2025