CVE-2022-29881CWE-306

A vulnerability has been identified in SICAM T (All versions < V3.0)

Medium · published May 10, 2022

CVSS v4.0
6.9
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow unauthenticated users to extract internal configuration details.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.01094 · 65.2th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-05-10T09:47Z
EPSS history
Timeline
  • 10 MAY 09:47Z
    A vulnerability has been identified in SICAM T (All versions < V3.0)
    cvelistv5