← Database

CVE-2022-30228

HIGH CVSS: 8.8 Published: 2022-06-14 Modified: 2026-06-17

Description

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.

Affected Platforms

Siemens Sicam Gridedge Essential

Weakness Type

CWE-346, CWE-346

References