Web Management Interface Vulnerability in SICAM P850 and P855 by Siemens

CVE-2022-29881

What is CVE-2022-29881?

A vulnerability exists in the web-based management interface of SICAM P850 and P855 devices, allowing unauthenticated users to gain access to sensitive internal configuration details. The lack of special access protection for certain internal developer views can lead to unauthorized data extraction, potentially compromising the integrity and security of the system. Users are advised to upgrade to version 3.00 or later to mitigate this risk.

References