high8.8
CVE-2022-29872
A vulnerability has been identified in SICAM T (All versions < V3.0).
Impact
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | 7kg8500-0aa00-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa00-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa10-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa10-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa30-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa30-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa01-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa01-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa02-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa02-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa11-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa11-2aa0 Firmware | before 3.00 |