A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions), SICAM GridEdge Essential Intel (All versions < V2.7.3), SICAM GridEdge Essential with GDS ARM (All versions), SICAM GridEdge Essential with GDS Intel (All versions < V2.7.3). Affected software uses an improperly protected file to import SSH keys. Attackers with access to the filesystem of the host on which SICAM GridEdge runs, are able to inject a custom SSH key to that file.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf | Mitigation Patch Vendor Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf | Mitigation Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf - Mitigation, Patch, Vendor Advisory |
19 Jul 2022, 19:07
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-668 | |
| CPE | cpe:2.3:a:siemens:sicam_gridedge_essential_gds_intel:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sicam_gridedge_essential_arm:-:*:*:*:*:*:*:* cpe:2.3:a:siemens:sicam_gridedge_essential_intel:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sicam_gridedge_essential_gds_arm:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 5.5 |
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf - Mitigation, Patch, Vendor Advisory |
12 Jul 2022, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-07-12 10:15
Updated : 2024-11-21 07:09
NVD link : CVE-2022-34464
Mitre link : CVE-2022-34464
CVE.ORG link : CVE-2022-34464
JSON object : View
Products Affected
siemens
- sicam_gridedge_essential_gds_intel
- sicam_gridedge_essential_intel
- sicam_gridedge_essential_arm
- sicam_gridedge_essential_gds_arm
CWE
CWE-668
Exposure of Resource to Wrong Sphere