CVE-2022-29876 Cross-site scripting in SICAM T

What is CVE-2022-29876?

CVE-2022-29876 is a high-severity cross-site scripting vulnerability in Siemens SICAM T, published on 10 May 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.

Weakness: CWE-79

Which versions are affected by CVE-2022-29876?

It affects 36 products.

Products include Siemens 7kg8500-0aa00-0aa0 Firmware, Siemens 7kg8500-0aa00-2aa0 Firmware, Siemens 7kg8500-0aa10-0aa0 Firmware, Siemens 7kg8500-0aa10-2aa0 Firmware, Siemens 7kg8500-0aa30-0aa0 Firmware, Siemens 7kg8500-0aa30-2aa0 Firmware and 30 more.

How do I fix CVE-2022-29876?

No fix has been published for CVE-2022-29876 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2022-29876 being exploited?

There is no known exploitation of CVE-2022-29876 in the wild and no public exploit code.

Other vulnerabilities in Siemens SICAM T

• CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions Critical 9.8
• CVE-2022-29873 Other in SICAM T Critical 9.3
• CVE-2022-29874 Information disclosure in SICAM T High 8.8
• CVE-2022-29872 Other in SICAM T High 8.7
• CVE-2022-40226 Auth bypass in SICAM P850 High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m67p-4364-8xgh.