7kg8551-0aa12-2aa0 Firmware vulnerabilities

6 known vulnerabilities in 7kg8551-0aa12-2aa0 Firmware from Siemens. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SICAM P850: Improper Neutralization of Parameter/Argument Delimiters

  CVE-2022-41665Oct 11, 2022SiemensEPSS 1.42%

  A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.10

• 8.1 High severity

  SICAM P850: Session Fixation

  CVE-2022-40226Oct 11, 2022Siemens

  A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.10

• 8.1 High severity

  SICAM T: Authentication Bypass by Capture-replay

  CVE-2022-29878May 20, 2022SiemensEPSS 1.12%

  A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An unauthenticated attacker could capture a valid challenge-respons

• 7.5 High severity

  SICAM T: Cleartext Transmission of Sensitive Information

  CVE-2022-29874May 20, 2022Siemens

  A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the fun

• 9.8 Critical severity

  SICAM T: Improper Neutralization of Parameter/Argument Delimiters

  CVE-2022-29873May 20, 2022SiemensEPSS 1.99%

  A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated attacker to set the device to a denial of service state or to contr

• 8.8 High severity

  A vulnerability has been identified in SICAM T (All versions < V3.0).

  CVE-2022-29872May 20, 2022SiemensEPSS 1.5%

  A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the device to a denial of service state or to control the program cou