CVE-2022-29883 : A vulnerability has been identified in SICAM P850 (All versions

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

Published 2022-05-20 13:15:16

Updated 2023-06-28 20:40:36

Source Siemens AG

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2022-29883

Siemens » 7kg8500-0aa00-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa00-0aa0 » Version: N/A
Siemens » 7kg8500-0aa00-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa00-2aa0 » Version: N/A
Siemens » 7kg8500-0aa10-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa10-0aa0 » Version: N/A
Siemens » 7kg8500-0aa10-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa10-2aa0 » Version: N/A
Siemens » 7kg8500-0aa30-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa30-0aa0 » Version: N/A
Siemens » 7kg8500-0aa30-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8500-0aa30-2aa0 » Version: N/A
Siemens » 7kg8501-0aa01-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa01-0aa0 » Version: N/A
Siemens » 7kg8501-0aa01-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa01-2aa0 » Version: N/A
Siemens » 7kg8501-0aa02-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa02-0aa0 » Version: N/A
Siemens » 7kg8501-0aa02-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa02-2aa0 » Version: N/A
Siemens » 7kg8501-0aa11-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa11-0aa0 » Version: N/A
Siemens » 7kg8501-0aa11-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa11-2aa0 » Version: N/A
Siemens » 7kg8501-0aa12-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa12-0aa0 » Version: N/A
Siemens » 7kg8501-0aa12-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa12-2aa0 » Version: N/A
Siemens » 7kg8501-0aa31-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa31-0aa0 » Version: N/A
Siemens » 7kg8501-0aa31-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa31-2aa0 » Version: N/A
Siemens » 7kg8501-0aa32-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa32-0aa0 » Version: N/A
Siemens » 7kg8501-0aa32-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8501-0aa32-2aa0 » Version: N/A
Siemens » 7kg8550-0aa00-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa00-0aa0 » Version: N/A
Siemens » 7kg8550-0aa00-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa00-2aa0 » Version: N/A
Siemens » 7kg8550-0aa10-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa10-0aa0 » Version: N/A
Siemens » 7kg8550-0aa10-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa10-2aa0 » Version: N/A
Siemens » 7kg8550-0aa30-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa30-0aa0 » Version: N/A
Siemens » 7kg8550-0aa30-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8550-0aa30-2aa0 » Version: N/A
Siemens » 7kg8551-0aa01-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa01-0aa0 » Version: N/A
Siemens » 7kg8551-0aa01-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa01-2aa0 » Version: N/A
Siemens » 7kg8551-0aa02-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa02-0aa0 » Version: N/A
Siemens » 7kg8551-0aa02-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa02-2aa0 » Version: N/A
Siemens » 7kg8551-0aa11-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa11-0aa0 » Version: N/A
Siemens » 7kg8551-0aa11-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa11-2aa0 » Version: N/A
Siemens » 7kg8551-0aa12-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa12-0aa0 » Version: N/A
Siemens » 7kg8551-0aa12-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa12-2aa0 » Version: N/A
Siemens » 7kg8551-0aa31-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa31-0aa0 » Version: N/A
Siemens » 7kg8551-0aa31-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa31-2aa0 » Version: N/A
Siemens » 7kg8551-0aa32-0aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa32-0aa0 » Version: N/A
Siemens » 7kg8551-0aa32-2aa0 Firmware
Versions before (<) 3.00
cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » 7kg8551-0aa32-2aa0 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-29883

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-29883

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2022-29883

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Assigned by:
- nvd@nist.gov (Primary)
- productcert@siemens.com (Secondary)
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-29883

https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-29883

Products affected by CVE-2022-29883

Exploit prediction scoring system (EPSS) score for CVE-2022-29883

CVSS scores for CVE-2022-29883

CWE ids for CVE-2022-29883

References for CVE-2022-29883