CVE-2022-30228 Cross-site request forgery in SICAM GridEdge (Classic)
Attackers can execute malicious requests on behalf of legitimate users due to missing CORS restrictions in SICAM GridEdge.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-30228?
CVE-2022-30228 is a high-severity vulnerability in Siemens SICAM GridEdge (Classic), published on 14 Jun 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
Weakness: CWE-346
Which versions are affected by CVE-2022-30228?
It affects 1 product.
Products include Siemens Sicam Gridedge Essential.
How do I fix CVE-2022-30228?
No fix has been published for CVE-2022-30228 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-30228 being exploited?
There is no known exploitation of CVE-2022-30228 in the wild and no public exploit code.
Other vulnerabilities in Siemens SICAM GridEdge (Classic)
Sources
Also known as GHSA-rq2g-2prr-ww75.