{"id":"CVE-2022-30230","aliases":["EUVD-2022-35436","GHSA-c8r6-6crw-m7wv"],"status":"published","title":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6),...","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01125,"percentile":0.66504,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2022-06-14T09:21:51Z","modified":"2026-06-17T04:43:18Z","products":[{"vendor":"siemens","product":"sicam gridedge (classic)"},{"vendor":"siemens","product":"sicam_gridedge_essential"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-631336.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30230"},{"url":"https://github.com/advisories/GHSA-c8r6-6crw-m7wv"}],"sources":{"cve":[{"id":"CVE-2022-30230","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.","status":"published","published":"2022-06-14T09:21:51Z","modified":"2025-11-12T07:22:10.726Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:34:31.184134Z"}],"euvd":[{"id":"EUVD-2022-35436","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.","status":"published","published":"2022-06-14T09:21:51Z","modified":"2025-11-12T07:22:10Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T19:49:18.896005Z"}],"ghsa":[{"id":"GHSA-c8r6-6crw-m7wv","title":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6),...","description":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6), SICAM GridEdge Essential Intel (All versions \u003c V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions \u003c V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions \u003c V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.","status":"published","published":"2022-06-15T00:00:28Z","modified":"2025-11-12T09:31:28Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:04:45.782037Z"}],"nvd":[{"id":"CVE-2022-30230","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.","status":"published","published":"2022-06-14T10:15:20.377Z","modified":"2026-06-17T04:43:18.737Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}