Cross-Origin Resource Sharing Flaw in SICAM GridEdge Essential by Siemens

CVE-2022-30228

What is CVE-2022-30228?

A significant vulnerability has been identified in various versions of SICAM GridEdge Essential software, including both ARM and Intel builds as well as configurations with GDS. The flaw arises from the failure to enforce cross-origin resource sharing (CORS) restrictions during critical operations. This oversight allows attackers to potentially exploit the system if they can trick a legitimate user into accessing malicious resources. Such an attack could lead to improper handling of sensitive data and unauthorized actions within the affected systems.

References