Parameter Validation Flaw in SICAM P850 and SICAM P855 Devices by Siemens

CVE-2022-29872

What is CVE-2022-29872?

A vulnerability has been identified within Siemens SICAM P850 and SICAM P855 devices, where improper validation of POST request parameters may be exploited. An authenticated attacker could potentially set the device into a denial of service state, or manipulate the program counter to execute arbitrary code on the device. This flaw emphasizes the importance of robust parameter validation to safeguard against malicious manipulations.

References