PT-2022-20026 · Siemens · Sicam Gridedge Essential Arm+3

Published 2022-06-14 · Updated 2025-11-12 · CVE-2022-30230

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SICAM GridEdge Essential ARM versions prior to V2.6.6 SICAM GridEdge Essential Intel versions prior to V2.6.6 SICAM GridEdge Essential with GDS ARM versions prior to V2.6.6 SICAM GridEdge Essential with GDS Intel versions prior to V2.6.6

Description The issue allows an unauthenticated attacker to create a new user with administrative permissions because the affected software does not require authenticated access for privileged functions.

Recommendations For SICAM GridEdge Essential ARM versions prior to V2.6.6, update to version V2.6.6 or later. For SICAM GridEdge Essential Intel versions prior to V2.6.6, update to version V2.6.6 or later. For SICAM GridEdge Essential with GDS ARM versions prior to V2.6.6, update to version V2.6.6 or later. For SICAM GridEdge Essential with GDS Intel versions prior to V2.6.6, update to version V2.6.6 or later.

Fix

LPE

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-30230

Affected Products

Sicam Gridedge Essential Arm

Sicam Gridedge Essential Intel

Sicam Gridedge Essential With Gds Arm

Sicam Gridedge Essential With Gds Intel

References · 5

• https://osv.dev/vulnerability/CVE-2022-30230 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30230 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-631336.html · Note
• https://twitter.com/0dayPublishing/status/1988512034175017184 · Twitter Post