6.5

CVE-2022-29877

A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.

Data is provided by the National Vulnerability Database (NVD)
Siemens7kg8500-0aa00-0aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa00-0aa0 Version-
Siemens7kg8500-0aa00-2aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa00-2aa0 Version-
Siemens7kg8500-0aa10-0aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa10-0aa0 Version-
Siemens7kg8500-0aa10-2aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa10-2aa0 Version-
Siemens7kg8500-0aa30-0aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa30-0aa0 Version-
Siemens7kg8500-0aa30-2aa0 Firmware Version < 3.00
   Siemens7kg8500-0aa30-2aa0 Version-
Siemens7kg8501-0aa01-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa01-0aa0 Version-
Siemens7kg8501-0aa01-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa01-2aa0 Version-
Siemens7kg8501-0aa02-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa02-0aa0 Version-
Siemens7kg8501-0aa02-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa02-2aa0 Version-
Siemens7kg8501-0aa11-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa11-0aa0 Version-
Siemens7kg8501-0aa11-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa11-2aa0 Version-
Siemens7kg8501-0aa12-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa12-0aa0 Version-
Siemens7kg8501-0aa12-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa12-2aa0 Version-
Siemens7kg8501-0aa31-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa31-0aa0 Version-
Siemens7kg8501-0aa31-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa31-2aa0 Version-
Siemens7kg8501-0aa32-0aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa32-0aa0 Version-
Siemens7kg8501-0aa32-2aa0 Firmware Version < 3.00
   Siemens7kg8501-0aa32-2aa0 Version-
Siemens7kg8550-0aa00-0aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa00-0aa0 Version-
Siemens7kg8550-0aa00-2aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa00-2aa0 Version-
Siemens7kg8550-0aa10-0aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa10-0aa0 Version-
Siemens7kg8550-0aa10-2aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa10-2aa0 Version-
Siemens7kg8550-0aa30-0aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa30-0aa0 Version-
Siemens7kg8550-0aa30-2aa0 Firmware Version < 3.00
   Siemens7kg8550-0aa30-2aa0 Version-
Siemens7kg8551-0aa01-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa01-0aa0 Version-
Siemens7kg8551-0aa01-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa01-2aa0 Version-
Siemens7kg8551-0aa02-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa02-0aa0 Version-
Siemens7kg8551-0aa02-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa02-2aa0 Version-
Siemens7kg8551-0aa11-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa11-0aa0 Version-
Siemens7kg8551-0aa11-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa11-2aa0 Version-
Siemens7kg8551-0aa12-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa12-0aa0 Version-
Siemens7kg8551-0aa12-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa12-2aa0 Version-
Siemens7kg8551-0aa31-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa31-0aa0 Version-
Siemens7kg8551-0aa31-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa31-2aa0 Version-
Siemens7kg8551-0aa32-0aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa32-0aa0 Version-
Siemens7kg8551-0aa32-2aa0 Firmware Version < 3.00
   Siemens7kg8551-0aa32-2aa0 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.503
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.