VULNERABILITY INTELLIGENCE

CVE-2022-29874

CVSS score8.8 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2022-05-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.

Weakness classification

  • productcert@siemens.com: CWE-319
  • nvd@nist.gov: CWE-319

Primary references