{"id":"CVE-2022-29880","aliases":["EUVD-2022-34192","GHSA-xf7c-hpj8-f7wx"],"status":"published","title":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All...","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0064,"percentile":0.50991,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-05-10T09:47:25Z","modified":"2026-06-17T04:40:53Z","products":[{"vendor":"siemens","product":"7kg8500-0aa00-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa00-2aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa10-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa10-2aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa30-0aa0_firmware"},{"vendor":"siemens","product":"7kg8500-0aa30-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa01-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa01-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa02-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa02-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa11-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa11-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa12-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa12-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa31-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa31-2aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa32-0aa0_firmware"},{"vendor":"siemens","product":"7kg8501-0aa32-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa00-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa00-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa10-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa10-2aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa30-0aa0_firmware"},{"vendor":"siemens","product":"7kg8550-0aa30-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa01-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa01-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa02-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa02-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa11-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa11-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa12-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa12-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa31-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa31-2aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa32-0aa0_firmware"},{"vendor":"siemens","product":"7kg8551-0aa32-2aa0_firmware"},{"vendor":"siemens","product":"sicam t"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-165073.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-471761.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29880"},{"url":"https://github.com/advisories/GHSA-xf7c-hpj8-f7wx"}],"sources":{"cve":[{"id":"CVE-2022-29880","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.","status":"published","published":"2022-05-10T09:47:25Z","modified":"2025-12-09T10:40:16.644Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:35.945659Z"}],"euvd":[{"id":"EUVD-2022-34192","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.","status":"published","published":"2022-05-10T09:47:25Z","modified":"2025-12-09T10:40:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:08.541096Z"}],"ghsa":[{"id":"GHSA-xf7c-hpj8-f7wx","title":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All...","description":"A vulnerability has been identified in SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P850 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00), SICAM P855 (All versions \u003c V3.00). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.","status":"published","published":"2022-05-21T00:01:06Z","modified":"2025-12-09T18:31:31Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:05:06.989368Z"}],"nvd":[{"id":"CVE-2022-29880","description":"A vulnerability has been identified in SICAM T (All versions \u003c V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name of a logged user which accesses the affected views.","status":"published","published":"2022-05-20T13:15:16.28Z","modified":"2026-06-17T04:40:53.56Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:20.264424Z"}]}}