#VU64393 Missing Authentication for Critical Function in Siemens products - CVE-2022-30229

Vulnerability identifier: #VU64393

Vulnerability risk: High

CVSSv4.0: 7.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2022-30229

CWE-ID: CWE-306

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
SICAM GridEdge Essential ARM
Other software / Other software solutions
SICAM GridEdge Essential Intel
Other software / Other software solutions
SICAM GridEdge Essential with GDS ARM
Other software / Other software solutions
SICAM GridEdge Essential with GDS Intel
Other software / Other software solutions

Vendor: Siemens

Description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to the affected software does not require authenticated access for privileged functions. A remote attacker can change data of an user, such as credentials, in case that user's id is known.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

SICAM GridEdge Essential ARM: before 2.6.6

SICAM GridEdge Essential Intel: before 2.6.6

SICAM GridEdge Essential with GDS ARM: before 2.6.6

SICAM GridEdge Essential with GDS Intel: before 2.6.6

---

External links
https://cert-portal.siemens.com/productcert/pdf/ssa-631336.pdf

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.