PT-2022-2736 · Siemens · Siemens Sicam P850+1

Published 2022-04-28 · Updated 2022-05-26 · CVE-2022-29872

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Siemens SICAM P850 versions prior to V3.00 Siemens SICAM P855 versions prior to V3.00

Description The issue is related to incorrect validation of parameters in POST requests. This could allow a remote attacker to cause a denial of service or execute arbitrary code on the device.

Recommendations For Siemens SICAM P850 versions prior to V3.00, update to version V3.00 or later. For Siemens SICAM P855 versions prior to V3.00, update to version V3.00 or later.

Fix

RCE

Weakness Enumeration

CWE-20

CWE-141

Related Identifiers

BDU:2022-03242

CVE-2022-29872

Affected Products

Siemens Sicam P850

Siemens Sicam P855

References · 9

• https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29872 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29872 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03242 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-132-07 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-165073.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html · Note
• https://cybersecurity-help.cz/vdb/SB2022051724 · Note
• https://vuldb.com/?id.200458 · Note