CVE-2022-29876
No fix known EPSS <1%CVSS 7.1
A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.
Products: Siemens SICAM T