CVE-2022-29879 MEDIUM

CVE-2022-29879

Vendor Siemens

Product SICAM T

Weakness CWE-306 · Missing auth

Published May 10, 2022

Last update December 9, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.

Key dates

02Disclosure timeline

May 10, 2022 CVE published

December 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29879 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

04Related CVE

CVE-2026-44338 PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution CVE-2026-44830 Empty API_TOKEN disables authentication on network-reachable HTTP/SSE transport CVE-2026-50512 Microsoft PC Manager Elevation of Privilege Vulnerability CVE-2026-4436 GPL Odorizers GPL750 Missing Authentication for Critical Function CVE-2021-47731 Selea Targa IP Camera Developer Backdoor Configuration Overwrite