CVE-2022-29872

Katalog CVE

CVSS 8.8 · High EPSS 1,5%

Kerentanan Improper Neutralization of Parameter/Argument Delimiters pada siemens 7kg8500-0aa00-0aa0 firmware, siemens 7kg8500-0aa00-2aa0 firmware +34 lainnya. Skor CVSS 3.1 8.8 (High) menurut siemens.com.

Deskripsi (NVD)

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.

Rincian

Terbit di NVD

20 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber siemens.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-141: Improper Neutralization of Parameter/Argument Delimiters
CWE-20: Improper Input Validation

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 73,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf patch · advisory vendor
• https://cert-portal.siemens.com/productcert/html/ssa-165073.html
• https://cert-portal.siemens.com/productcert/html/ssa-471761.html