← back
CVE-2022-29873

CVE-2022-29873

CVSS 9.3 CRITICALEPSS 1.7%CWE-141
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Siemens · SICAM T

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://cert-portal.siemens.com/productcert/html/ssa-165073.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-471761.htmlhttps://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf