File Upload Vulnerability in SICAM P850 and SICAM P855 by Siemens

CVE-2022-29882

What is CVE-2022-29882?

A security issue has been detected in SICAM P850 and SICAM P855 products from Siemens. The vulnerability arises from the improper handling of uploaded files. This flaw allows unauthenticated attackers to exploit the system by storing a cross-site scripting (XSS) attack within error logs. When a legitimate user accesses these logs, the attacker may perform arbitrary actions under the user's identity, potentially leading to further system compromise.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References