Known vulnerabilities in SICAM P855

Vendor: Siemens
Software: SICAM P855
Software CPE: cpe:2.3:h:siemens:sicam_p855:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SICAM P855 SICAM P855 is affected by 13 known vulnerabilities: 2 high, 6 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68286 - Improper input validation
CVE-2022-41665		 CWE-20 High
No
No
 3.10 13.10.2022 SB2022101308
#VU68285 - Session Fixation
CVE-2022-40226		 CWE-384 Low
No
No
 3.10 13.10.2022 SB2022101308
#VU63341 - Improper Authentication
CVE-2022-29883		 CWE-287 Medium
No
No
 3.00 17.05.2022 SB2022051724
#VU63340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29882		 CWE-79 Low
No
No
 3.00 17.05.2022 SB2022051724
#VU63334 - Missing Authentication for Critical Function
CVE-2022-29881		 CWE-306 Medium
No
No
 3.00 17.05.2022 SB2022051724
#VU63333 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29880		 CWE-79 Low
No
No
 3.00 17.05.2022 SB2022051724
#VU63331 - Missing Authentication for Critical Function
CVE-2022-29879		 CWE-306 Low
No
No
 3.00 17.05.2022 SB2022051724
#VU63327 - Authentication Bypass by Capture-replay
CVE-2022-29878		 CWE-294 Medium
No
No
 3.00 17.05.2022 SB2022051724
#VU63325 - Missing Authentication for Critical Function
CVE-2022-29877		 CWE-306 Medium
No
No
 3.00 17.05.2022 SB2022051724
#VU63324 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-29876		 CWE-79 Low
No
No
 3.00 17.05.2022 SB2022051724
#VU63321 - Cleartext Transmission of Sensitive Information
CVE-2022-29874		 CWE-319 Medium
No
No
 3.00 17.05.2022 SB2022051724
#VU63320 - Improper input validation
CVE-2022-29873		 CWE-20 High
No
No
 3.00 17.05.2022 SB2022051724
#VU63317 - Improper input validation
CVE-2022-29872		 CWE-20 Medium
No
No
 3.00 17.05.2022 SB2022051724