CVE-2022-30228: Siemens Sicam Gridedge Essential

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.

Affected products

• Siemens Sicam Gridedge Essential: before 2.6.6 (fixed in 2.6.6)

Published 2022-06-14. Last modified 2026-06-17.