ICSA-22-286-09 | Vulnetix

ICSA-22-286-09 PUBLISHED CVSS 7.5 HIGH

Record from circl · Published October 11, 2022

Session fixation and multiple incorrect parameter parsing vulnerabilities that could potentially lead to remote code execution were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and recommends to update to the latest versions.

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected products

Vendor	Product	Versions
	SICAM P855 (7KG8550-0AA00-2AA0)
	SICAM P850 (7KG8500-0AA10-2AA0)
	SICAM P850 (7KG8501-0AA02-2AA0)
	SICAM P850 (7KG8501-0AA12-2AA0)
	SICAM P850 (7KG8501-0AA11-2AA0)
	SICAM P850 (7KG8500-0AA30-2AA0)
	SICAM P850 (7KG8501-0AA02-0AA0)
	SICAM P850 (7KG8501-0AA31-2AA0)
	SICAM P850 (7KG8500-0AA00-0AA0)
	SICAM P855 (7KG8550-0AA00-0AA0)
	SICAM P850 (7KG8501-0AA32-2AA0)
	SICAM P850 (7KG8500-0AA30-0AA0)
	SICAM P850 (7KG8501-0AA11-0AA0)
	SICAM P850 (7KG8501-0AA01-2AA0)
	SICAM P850 (7KG8500-0AA10-0AA0)
	SICAM P850 (7KG8501-0AA31-0AA0)
	SICAM P850 (7KG8501-0AA12-0AA0)
	SICAM P850 (7KG8501-0AA01-0AA0)
	SICAM P850 (7KG8500-0AA00-2AA0)
	SICAM P850 (7KG8501-0AA32-0AA0)

Timeline

Oct 11, 2022 CVE Published
May 6, 2025 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ICSA-22-286-09
vulnetix vdb fixes ICSA-22-286-09

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ICSA-22-286-09/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →