CVE-2022-29879CWE-306
A vulnerability has been identified in SICAM T (All versions < V3.0)
Medium · published May 10, 2022
What it is
A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00861 · 58.1th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2022-05-10T09:47Z
EPSS history
Timeline