CVE-2022-29883 MEDIUM

CVE-2022-29883

Vendor Siemens

Product SICAM T

Weakness CWE-287 · Improper authentication

Published May 10, 2022

Last update December 9, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

Key dates

02Disclosure timeline

May 10, 2022 CVE published

December 9, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29883 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2026-46705 russh server userauth state is not reset when authentication principal changes CVE-2026-45567 Roxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gpt CVE-2026-10777 ealpha072 Student-Management-System Administrative Backend config.php improper authentication CVE-2026-10611 OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled CVE-2026-40995 X.509 authentication bypasses Spring Security account checks