CVE-2022-34464
Medium
Description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file.
SeverityMedium
CVSS6.3
Exploit probability—
ProductSiemens Sicam Gridedge Essential Arm
PublishedJul 12, 2022
First seenJul 12, 2022
Weakness typeCWE-552CWE-552
How to fix
Update
- siemens sicam_gridedge_essential_gds_intel2.7.3 or later
- siemens sicam_gridedge_essential_intel2.7.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens sicam_gridedge_essential_arm | No range specified | — |
| siemens sicam_gridedge_essential_gds_arm | No range specified | — |
| siemens sicam_gridedge_essential_gds_intel | v < 2.7.3 | 2.7.3 |
| siemens sicam_gridedge_essential_intel | v < 2.7.3 | 2.7.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.