medium4.3
CVE-2022-29879
A vulnerability has been identified in SICAM T (All versions < V3.0).
Impact
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | 7kg8500-0aa00-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa00-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa10-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa10-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa30-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8500-0aa30-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa01-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa01-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa02-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa02-2aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa11-0aa0 Firmware | before 3.00 |
| Siemens | 7kg8501-0aa11-2aa0 Firmware | before 3.00 |