PT-2022-2738 · Siemens · Sicam P850+1

Published 2022-04-28 · Updated 2025-12-09 · CVE-2022-29873

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SICAM P850 versions prior to V3.00 SICAM P855 versions prior to V3.00

Description A vulnerability has been identified in the affected devices, which do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Recommendations For SICAM P850 versions prior to V3.00, update to version V3.00 or later. For SICAM P855 versions prior to V3.00, update to version V3.00 or later. As a temporary workaround, consider restricting access to the affected devices to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

CWE-141

Related Identifiers

BDU:2022-03244

CVE-2022-29873

Affected Products

Sicam P850

Sicam P855

References · 11

• https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29873 · Security Note
• https://bdu.fstec.ru/vul/2022-03244 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29873 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-22-132-07 · Note
• https://twitter.com/0dayPublishing/status/1998341934729797820 · Twitter Post
• https://vuldb.com/?id.200459 · Note
• https://t.me/cibsecurity/43045 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html · Note
• https://cybersecurity-help.cz/vdb/SB2022051724 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-165073.html · Note