Vulnerability · Published Jul 12, 2022 · Assigned by siemens
CVE-2022-34464
Medium 6.3
In plain English
A medium-severity security flaw in SICAM GridEdge (Classic) from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.4%top 61.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import SSH keys. This could allow attackers with access to the filesystem of the host on which SICAM GridEdge runs to inject a custom SSH key to that file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SICAM GridEdge (Classic) | 0 – before V2.7.3 |
Weakness: CWE-552 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L