Vulnerability Details CVE-2022-30228
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 4.3
References
Products affected by CVE-2022-30228
-
cpe:2.3:a:siemens:sicam_gridedge_essential:-