CVE-2022-29873 : A vulnerability has been identified in SICAM P850 (All versions

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Published 2022-05-20 13:15:16

Updated 2022-05-26 21:02:31

Source Siemens AG

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2022-29873

Siemens » 7kg8500-0aa00-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa00-0aa0 » Version: N/A
Siemens » 7kg8500-0aa00-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa00-2aa0 » Version: N/A
Siemens » 7kg8500-0aa10-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa10-0aa0 » Version: N/A
Siemens » 7kg8500-0aa10-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa10-2aa0 » Version: N/A
Siemens » 7kg8500-0aa30-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa30-0aa0 » Version: N/A
Siemens » 7kg8500-0aa30-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa30-2aa0 » Version: N/A
Siemens » 7kg8501-0aa01-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa01-0aa0 » Version: N/A
Siemens » 7kg8501-0aa01-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa01-2aa0 » Version: N/A
Siemens » 7kg8501-0aa02-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa02-0aa0 » Version: N/A
Siemens » 7kg8501-0aa02-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa02-2aa0 » Version: N/A
Siemens » 7kg8501-0aa11-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa11-0aa0 » Version: N/A
Siemens » 7kg8501-0aa11-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa11-2aa0 » Version: N/A
Siemens » 7kg8501-0aa12-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa12-0aa0 » Version: N/A
Siemens » 7kg8501-0aa12-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa12-2aa0 » Version: N/A
Siemens » 7kg8501-0aa31-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa31-0aa0 » Version: N/A
Siemens » 7kg8501-0aa31-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa31-2aa0 » Version: N/A
Siemens » 7kg8501-0aa32-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa32-0aa0 » Version: N/A
Siemens » 7kg8501-0aa32-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa32-2aa0 » Version: N/A
Siemens » 7kg8550-0aa00-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa00-0aa0 » Version: N/A
Siemens » 7kg8550-0aa00-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa00-2aa0 » Version: N/A
Siemens » 7kg8550-0aa10-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa10-0aa0 » Version: N/A
Siemens » 7kg8550-0aa10-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa10-2aa0 » Version: N/A
Siemens » 7kg8550-0aa30-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa30-0aa0 » Version: N/A
Siemens » 7kg8550-0aa30-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa30-2aa0 » Version: N/A
Siemens » 7kg8551-0aa01-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa01-0aa0 » Version: N/A
Siemens » 7kg8551-0aa01-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa01-2aa0 » Version: N/A
Siemens » 7kg8551-0aa02-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa02-0aa0 » Version: N/A
Siemens » 7kg8551-0aa02-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa02-2aa0 » Version: N/A
Siemens » 7kg8551-0aa11-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa11-0aa0 » Version: N/A
Siemens » 7kg8551-0aa11-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa11-2aa0 » Version: N/A
Siemens » 7kg8551-0aa12-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa12-0aa0 » Version: N/A
Siemens » 7kg8551-0aa12-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa12-2aa0 » Version: N/A
Siemens » 7kg8551-0aa31-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa31-0aa0 » Version: N/A
Siemens » 7kg8551-0aa31-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa31-2aa0 » Version: N/A
Siemens » 7kg8551-0aa32-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa32-0aa0 » Version: N/A
Siemens » 7kg8551-0aa32-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa32-2aa0 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-29873

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-29873

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-29873

CWE-141 Improper Neutralization of Parameter/Argument Delimiters

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as parameter or argument delimiters when they are sent to a downstream component.

Assigned by: productcert@siemens.com (Secondary)

References for CVE-2022-29873

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-29873

Products affected by CVE-2022-29873

Exploit prediction scoring system (EPSS) score for CVE-2022-29873

CVSS scores for CVE-2022-29873

CWE ids for CVE-2022-29873

References for CVE-2022-29873