CVE-2022-29874

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not encrypt web traffic with clients but communicate in cleartext via HTTP. This could allow an unauthenticated attacker to capture the traffic and interfere with the functionality of the device.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: May 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-298759.8A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, CVE-2022-298767.1A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request par CVE-2022-298776.5A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.0 CVE-2022-298787.5A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent duri CVE-2022-298794.3A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ CVE-2022-29887.5A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from CVE-2022-298806.5A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly validate input in the configuration i CVE-2022-298815.3A vulnerability has been identified in SICAM T (All versions < V3.0). The web based management interface of affected devices does not employ CVE-2022-298827.1A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not handle uploaded files correctly. An unauthenti CVE-2022-298835.3A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pag CVE-2022-298847.5A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/CVE-2022-298857.5The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInter