PT-2022-3244 · Siemens · Sicam P850+1

Published 2022-04-28 · Updated 2022-06-02 · CVE-2022-29877

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SICAM P850 versions prior to V3.00 SICAM P855 versions prior to V3.00

Description A vulnerability has been identified that allows unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.

Recommendations For SICAM P850 versions prior to V3.00, update to version V3.00 or later to resolve the issue. For SICAM P855 versions prior to V3.00, update to version V3.00 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface configuration area until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2022-03950

CVE-2022-29877

Affected Products

Sicam P850

Sicam P855

References · 8

• https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29877 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29877 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03950 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-132-07 · Note
• https://cybersecurity-help.cz/vdb/SB2022051724 · Note
• https://vuldb.com/?id.200461 · Note
• https://t.me/cibsecurity/43047 · Telegram Post