File Upload Vulnerability in SICAM P850 and SICAM P855 by Siemens

CVE-2022-29882

What is CVE-2022-29882?

A security issue has been detected in SICAM P850 and SICAM P855 products from Siemens. The vulnerability arises from the improper handling of uploaded files. This flaw allows unauthenticated attackers to exploit the system by storing a cross-site scripting (XSS) attack within error logs. When a legitimate user accesses these logs, the attacker may perform arbitrary actions under the user's identity, potentially leading to further system compromise.

References