CVE-2022-29881
mediumpriority · track · 20OT risk · elevatedEPSS 0.011 · 65 %ileDEEUNLRUUSEPSS · scored 2026-10-27
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSICAM P850siemens_psirt
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P855siemens_psirt
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - FixedSICAM Tsiemens_psirt
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743625/ - FixedSICAM P850cisa_csaf_ot
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743594/ - FixedSICAM P855cisa_csaf_ot
Update to V3.00 or later version
https://support.industry.siemens.com/cs/ww/en/view/109743621/ - MitigationSICAM P850siemens_psirt
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855siemens_psirt
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM Tsiemens_psirt
Do not access links from untrusted sources while logged in at SICAM T
- MitigationSICAM P850cisa_csaf_ot
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
- MitigationSICAM P855cisa_csaf_ot
Do not access links from untrusted sources while logged in at SICAM P850 or SICAM P855 devices
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.7–6.9
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (82)
Products and version ranges known to be affected.
advisories (5)
Vendor and ecosystem advisories describing this.
- NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
- SSA-165073SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices2022-05-10csaf · siemens_psirtDE
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
- SSA-471761SSA-471761: Multiple Vulnerabilities in SICAM T Before V3.02025-12-09csaf · siemens_psirtDE
SICAM T before V3.0 contain multiple vulnerabilities. These include critical issues such as improper parameter and input validation, various Cross-Site Scripting (XSS) vulnerabilities , and a Cross-Site Request Forgery (CSRF) vulnerability . Additional weaknesses comprise session fixation, authentication and authorization bypasses , missing HTTPS protection, and missing cookie protection flags. These issues could potentially lead to remote code execution, denial of service, unauthorized access to web-interface functionality, session hijacking, impersonation of legitimate users, or allow an attacker to perform arbitrary actions on the device on behalf of a user. Siemens has released a new version for SICAM T and recommends to update to the latest version.
- WID-SEC-W-2025-2767Siemens SICAM: Mehrere SchwachstellenDeutsch2022-05-09csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting Angriff durchzuführen.
- ICSA-22-132-07Siemens SICAM P850 and SICAM P8552022-05-10icsa · cisa_csaf_otUS
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
also known as (6)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (13)
External citations — patches, advisories, analysis.
- https://cert-portal.siemens.com/productcert/html/ssa-165073.htmlcnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-471761.htmlcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdfcnnvd
- https://cxsecurity.com/cveshow/CVE-2022-29881/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-132-07cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.2357cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022051724cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-165073.htmlenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan