CVE-2022-29880 Cross-site scripting in SICAM T

What is CVE-2022-29880?

CVE-2022-29880 is a medium-severity cross-site scripting vulnerability in Siemens SICAM T, published on 10 May 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.

Weakness: CWE-79

Which versions are affected by CVE-2022-29880?

It affects 36 products.

Products include Siemens 7kg8500-0aa00-0aa0 Firmware, Siemens 7kg8500-0aa00-2aa0 Firmware, Siemens 7kg8500-0aa10-0aa0 Firmware, Siemens 7kg8500-0aa10-2aa0 Firmware, Siemens 7kg8500-0aa30-0aa0 Firmware, Siemens 7kg8500-0aa30-2aa0 Firmware and 30 more.

How do I fix CVE-2022-29880?

No fix has been published for CVE-2022-29880 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2022-29880 being exploited?

There is no known exploitation of CVE-2022-29880 in the wild and no public exploit code.

Other vulnerabilities in Siemens SICAM T

• CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions Critical 9.8
• CVE-2022-29873 Other in SICAM T Critical 9.3
• CVE-2022-29874 Information disclosure in SICAM T High 8.8
• CVE-2022-29872 Other in SICAM T High 8.7
• CVE-2022-40226 Auth bypass in SICAM P850 High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xf7c-hpj8-f7wx.