Siemens 7kg8501-0aa32-2aa0 Firmware vulnerabilities

13 CVEs affecting Siemens 7kg8501-0aa32-2aa0 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41665, published 2022-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29873, published 2022-05-20. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of certain GET and POST requests. This could allow an unauthenticated…
CVE-2022-29872, published 2022-05-20. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate parameters of POST requests. This could allow an authenticated attacker to set the…
CVE-2022-41665, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions <…
CVE-2022-29878, published 2022-05-20. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response communication. An…
CVE-2022-29881, published 2022-05-20. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer…
CVE-2022-29883, published 2022-05-20. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to…
CVE-2022-29882, published 2022-05-20. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenticated attacker could take advantage of this situation to…
CVE-2022-29876, published 2022-05-20. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the…
CVE-2022-29879, published 2022-05-20. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer…
CVE-2022-40226, published 2022-10-11. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions <…

Latest

CVE-2022-29880, published 2022-05-20. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to…
CVE-2022-29877, published 2022-05-20. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All…