Siemens Sicam Gridedge Essential vulnerabilities

4 CVEs affecting Siemens Sicam Gridedge Essential, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-30231, published 2022-06-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-30230, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an…
CVE-2022-30229, published 2022-06-14. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an…
CVE-2022-30231, published 2022-06-14. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discloses password hashes of other users upon request. This could allow an…
CVE-2022-30228, published 2022-06-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical…