← Database

CVE-2022-29876

HIGH CVSS: 7.1 Published: 2022-05-20 Modified: 2026-06-17

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.

Affected Platforms

Siemens 7Kg8550-0Aa30-0Aa0 FirmwareSiemens 7Kg8550-0Aa00-0Aa0 FirmwareSiemens 7Kg8501-0Aa01-2Aa0Siemens 7Kg8501-0Aa12-2Aa0Siemens 7Kg8550-0Aa10-0Aa0 FirmwareSiemens 7Kg8551-0Aa32-2Aa0Siemens 7Kg8550-0Aa00-2Aa0 FirmwareSiemens 7Kg8550-0Aa10-2Aa0Siemens 7Kg8551-0Aa32-0Aa0Siemens 7Kg8551-0Aa12-2Aa0 Firmware

Weakness Type

CWE-79, CWE-79

References