← Database

CVE-2022-29882

HIGH CVSS: 7.1 Published: 2022-05-20 Modified: 2026-06-17

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to store an XSS attack, which could - when a legitimate user accesses the error logs - perform arbitrary actions in the name of the user.

Affected Platforms

Siemens 7Kg8550-0Aa30-0Aa0 FirmwareSiemens 7Kg8550-0Aa00-0Aa0 FirmwareSiemens 7Kg8501-0Aa01-2Aa0Siemens 7Kg8501-0Aa12-2Aa0Siemens 7Kg8550-0Aa10-0Aa0 FirmwareSiemens 7Kg8551-0Aa32-2Aa0Siemens 7Kg8550-0Aa00-2Aa0 FirmwareSiemens 7Kg8550-0Aa10-2Aa0Siemens 7Kg8551-0Aa32-0Aa0Siemens 7Kg8551-0Aa12-2Aa0 Firmware

Weakness Type

CWE-79, CWE-79

References