{"id":"CVE-2022-29874","aliases":["EUVD-2022-34186","GHSA-6vgf-xpr3-4724"],"status":"published","title":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All...","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00754,"percentile":0.55423,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2022-05-10T09:47:18Z","modified":"2026-06-17T04:40:52Z","products":[{"vendor":"siemens","product":"7kg8500-0aa00-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa00-2aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa10-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa10-2aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa30-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa30-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa01-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa01-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa02-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa02-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa11-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa11-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa12-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa12-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa31-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa31-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa32-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa32-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa00-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa00-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa10-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa10-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa30-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa30-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa01-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa01-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa02-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa02-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa11-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa11-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa12-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa12-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa31-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa31-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa32-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa32-2aa0_firmware"},{"vendor":"siemens","product":"sicam t"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-165073.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-471761.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29874"},{"url":"https://github.com/advisories/GHSA-6vgf-xpr3-4724"}],"sources":{"cve":[{"id":"CVE-2022-29874","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.","status":"published","published":"2022-05-10T09:47:18Z","modified":"2025-12-09T10:35:13.93Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-34186","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.","status":"published","published":"2022-05-10T09:47:18Z","modified":"2025-12-09T10:35:13Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:08.541096Z"}],"ghsa":[{"id":"GHSA-6vgf-xpr3-4724","title":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All...","description":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.","status":"published","published":"2022-05-21T00:01:05Z","modified":"2025-12-09T18:30:26Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T15:05:05.976411Z"}],"nvd":[{"id":"CVE-2022-29874","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.","status":"published","published":"2022-05-20T13:15:16.03Z","modified":"2026-06-17T04:40:52.457Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:07:20.264424Z"}]}}