SICAM GridEdge (Classic) vulnerabilities

2 known vulnerabilities in SICAM GridEdge (Classic) from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  RFC: Improper Validation of Integrity Check Value

  CVE-2024-3596Jul 9, 2024IETFEPSS 14.9%

  RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent

• 9.8 Critical severity

  SICAM GridEdge (Classic): Missing Authentication for Critical Functionality

  CVE-2022-30230Jun 14, 2022SiemensEPSS 1.13%

  A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrat