Access Control Vulnerability in SICAM P850 and P855 Products by Siemens

CVE-2022-29883

Summary

A significant access control vulnerability has been discovered in the Siemens SICAM P850 and P855 products, which affects all versions prior to V3.00. This flaw allows unauthorized users to access certain unprotected pages of the web interface, enabling them to delete critical log files without any authentication. The lack of proper access restrictions poses a serious risk to the integrity and security of logging data, potentially allowing threat actors to erase traces of malicious activities. Organizations utilizing these devices are advised to implement necessary safeguards and upgrade to the latest versions to mitigate these risks.

References