Siemens

Sicam Gridedge Essential

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-30228

  • EPSS 0.15%
  • Veröffentlicht 14.06.2022 10:15:20
  • Zuletzt bearbeitet 12.11.2025 08:15:37

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into...

7.2

CVE-2022-30229

  • EPSS 0.35%
  • Veröffentlicht 14.06.2022 10:15:20
  • Zuletzt bearbeitet 12.11.2025 08:15:39

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, s...

9.8

CVE-2022-30230

  • EPSS 0.69%
  • Veröffentlicht 14.06.2022 10:15:20
  • Zuletzt bearbeitet 12.11.2025 08:15:39

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with a...

4.9

CVE-2022-30231

  • EPSS 0.19%
  • Veröffentlicht 14.06.2022 10:15:20
  • Zuletzt bearbeitet 12.11.2025 08:15:39

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.