{"id":"CVE-2022-30231","aliases":["EUVD-2022-35437","GHSA-9rc7-jmvv-4fhr"],"status":"published","title":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6),...","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.","severity":{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0063,"percentile":0.50503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-402","CWE-522"],"published":"2022-06-14T09:21:53Z","modified":"2026-06-17T04:43:18Z","products":[{"vendor":"siemens","product":"sicam gridedge (classic)"},{"vendor":"siemens","product":"sicam_gridedge_essential"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-631336.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30231"},{"url":"https://github.com/advisories/GHSA-9rc7-jmvv-4fhr"}],"sources":{"cve":[{"id":"CVE-2022-30231","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.","status":"published","published":"2022-06-14T09:21:53Z","modified":"2025-11-12T07:22:11.891Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-402"],"updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-35437","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.","status":"published","published":"2022-06-14T09:21:53Z","modified":"2025-11-12T07:22:11Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:49:18.896005Z"}],"ghsa":[{"id":"GHSA-9rc7-jmvv-4fhr","title":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6),...","description":"A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions \u003c V2.6.6), SICAM GridEdge Essential Intel (All versions \u003c V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions \u003c V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions \u003c V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.","status":"published","published":"2022-06-15T00:00:28Z","modified":"2025-11-12T09:31:28Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-402","CWE-522"],"updated_at":"2026-11-02T15:04:45.782037Z"}],"nvd":[{"id":"CVE-2022-30231","description":"A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \u003c V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another user's password hash.","status":"published","published":"2022-06-14T10:15:20.433Z","modified":"2026-06-17T04:43:18.86Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-402","CWE-522"],"updated_at":"2026-11-02T14:07:22.232533Z"}]}}