CVE-2022-29873 Other in SICAM T
Unauthenticated attackers can execute arbitrary code or cause denial of service on Siemens SICAM T devices due to improper parameter validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-29873?
CVE-2022-29873 is a critical vulnerability in Siemens SICAM T, published on 10 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to control the program counter and, thus, execute arbitrary code on the device.
Weakness: CWE-141
Which versions are affected by CVE-2022-29873?
It affects 36 products.
Products include Siemens 7kg8500-0aa00-0aa0 Firmware, Siemens 7kg8500-0aa00-2aa0 Firmware, Siemens 7kg8500-0aa10-0aa0 Firmware, Siemens 7kg8500-0aa10-2aa0 Firmware, Siemens 7kg8500-0aa30-0aa0 Firmware, Siemens 7kg8500-0aa30-2aa0 Firmware and 30 more.
How do I fix CVE-2022-29873?
No fix has been published for CVE-2022-29873 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-29873 being exploited?
There is no known exploitation of CVE-2022-29873 in the wild and no public exploit code.
Other vulnerabilities in Siemens SICAM T
- CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions
- CVE-2022-29874 Information disclosure in SICAM T
- CVE-2022-29872 Other in SICAM T
- CVE-2022-40226 Auth bypass in SICAM P850
- CVE-2022-29878 Auth bypass in SICAM T
Sources
Also known as GHSA-v36v-c6xp-cpv3.