PT-2022-3230 · Siemens · Sicam P850+1

Published 2022-04-28 · Updated 2022-06-02 · CVE-2022-29879

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SICAM P850 versions prior to V3.00 SICAM P855 versions prior to V3.00

Description The vulnerability is related to the web-based management interface of the affected devices, which lacks proper access protection for certain internal developer views. This could allow remote attackers to disclose protected information. The issue is associated with the absence of authentication for a critical function.

Recommendations For SICAM P850 versions prior to V3.00, update to version V3.00 or later to resolve the issue. For SICAM P855 versions prior to V3.00, update to version V3.00 or later to resolve the issue. As a temporary workaround, consider restricting access to the web-based management interface until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2022-03933

CVE-2022-29879

Affected Products

Sicam P850

Sicam P855

References · 9

• https://osv.dev/vulnerability/CVE-2022-29879 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03933 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-29879 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-132-07 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-165073.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html · Note
• https://cybersecurity-help.cz/vdb/SB2022051724 · Note
• https://vuldb.com/?id.200462 · Note