VULNERABILITY INTELLIGENCE
CVE-2022-29879
CVSS score4.3 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2022-05-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
Weakness classification
- productcert@siemens.com: CWE-306
- nvd@nist.gov: CWE-306
Primary references
- productcert@siemens.com
- productcert@siemens.com
- productcert@siemens.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory