Medium severity · published May 10, 2022
CVE-2022-29877
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00),…
6.5
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). Affected devices allow unauthenticated access to the web interface configuration area. This could allow an attacker to extract internal configuration details or to reconfigure network settings. However, the reconfigured settings cannot be activated unless the role of an authenticated administrator user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
SICAM P850 · Siemens
All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; +12 more · source: vendor
SP
SICAM P855 · Siemens
All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; All versions < V3.00; +12 more · source: vendor
7F
7kg8500-0aa00-0aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8500-0aa00-2aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8500-0aa10-0aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8500-0aa10-2aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8500-0aa30-0aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8500-0aa30-2aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8501-0aa01-0aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8501-0aa01-2aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8501-0aa02-0aa0 Firmware · Siemens
before 3.00 · source: NVD
7F
7kg8501-0aa02-2aa0 Firmware · Siemens
before 3.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-29877
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-29877
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf
More from SICAM P850
8.8
CVE-2023-30901
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850…
8.8
CVE-2022-43439
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG9501-0AA01-2AA1) (All versions < V2.50),…
8.8
CVE-2022-43545
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),…
8.8
CVE-2022-43546
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50),…
8.8
CVE-2022-41665
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850…