CVE-2022-29872 Other in SICAM T
An authenticated attacker can exploit improper input validation in SICAM T devices to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29872?
CVE-2022-29872 is a high-severity vulnerability in Siemens SICAM T, published on 10 May 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Which versions are affected by CVE-2022-29872?
It affects 36 products.
Products include Siemens 7kg8500-0aa00-0aa0 Firmware, Siemens 7kg8500-0aa00-2aa0 Firmware, Siemens 7kg8500-0aa10-0aa0 Firmware, Siemens 7kg8500-0aa10-2aa0 Firmware, Siemens 7kg8500-0aa30-0aa0 Firmware, Siemens 7kg8500-0aa30-2aa0 Firmware and 30 more.
How do I fix CVE-2022-29872?
No fix has been published for CVE-2022-29872 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-29872 being exploited?
There is no known exploitation of CVE-2022-29872 in the wild and no public exploit code.
Other vulnerabilities in Siemens SICAM T
- CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions
- CVE-2022-29873 Other in SICAM T
- CVE-2022-29874 Information disclosure in SICAM T
- CVE-2022-40226 Auth bypass in SICAM P850
- CVE-2022-29878 Auth bypass in SICAM T
Sources
Also known as GHSA-qxq3-p28m-qc36.