製品・ソフトウェアに関する情報

JVN脆弱性詳細

複数のシーメンス製品における重要な機能に対する認証の欠如に関する脆弱性

Title	複数のシーメンス製品における重要な機能に対する認証の欠如に関する脆弱性
Summary	7kg8500-0aa00-0aa0 ファームウェア、7kg8500-0aa00-2aa0 ファームウェア、7kg8500-0aa10-0aa0 ファームウェア等複数のシーメンス製品には、重要な機能に対する認証の欠如に関する脆弱性が存在します。
Possible impacts	情報を取得される可能性があります。
Solution	ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。
Publication Date	May 20, 2022, midnight
Registration Date	Aug. 10, 2023, 5:25 p.m.
Last Update	Dec. 26, 2025, 11:44 a.m.

CVSS3.0 : 警告
Score	6.5
Vector	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS2.0 : 警告
Score	4
Vector	AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected System

シーメンス

7kg8500-0aa00-0aa0 ファームウェア 3.00 未満

7kg8500-0aa00-2aa0 ファームウェア 3.00 未満

7kg8500-0aa10-0aa0 ファームウェア 3.00 未満

7kg8500-0aa10-2aa0 ファームウェア 3.00 未満

7kg8500-0aa30-0aa0 ファームウェア 3.00 未満

7kg8500-0aa30-2aa0 ファームウェア 3.00 未満

7kg8501-0aa01-0aa0 ファームウェア 3.00 未満

7kg8501-0aa01-2aa0 ファームウェア 3.00 未満

7kg8501-0aa02-0aa0 ファームウェア 3.00 未満

7kg8501-0aa02-2aa0 ファームウェア 3.00 未満

7kg8501-0aa11-0aa0 ファームウェア 3.00 未満

7kg8501-0aa11-2aa0 ファームウェア 3.00 未満

7kg8501-0aa12-0aa0 ファームウェア 3.00 未満

7kg8501-0aa12-2aa0 ファームウェア 3.00 未満

7kg8501-0aa31-0aa0 ファームウェア 3.00 未満

7kg8501-0aa31-2aa0 ファームウェア 3.00 未満

7kg8501-0aa32-0aa0 ファームウェア 3.00 未満

7kg8501-0aa32-2aa0 ファームウェア 3.00 未満

7kg8550-0aa00-0aa0 ファームウェア 3.00 未満

7kg8550-0aa00-2aa0 ファームウェア 3.00 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2022-29879	https://www.cve.org/CVERecord?id=CVE-2022-29879
National Vulnerability Database (NVD)
2	CVE-2022-29879	https://nvd.nist.gov/vuln/detail/CVE-2022-29879

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-306	https://cwe.mitre.org/data/definitions/306.html

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-22-132-07	https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-07
JVN
2	JVNVU#92977068	https://jvn.jp/vu/JVNVU92977068/
3	JVNVU#99514792	https://jvn.jp/vu/JVNVU99514792/index.html
関連文書
4	cert-portal.siemens.com (ssa-165073)	https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf

Change Log

No	Changed Details	Date of change
2	[2025年12月15日] 参考情報：JVN (JVNVU#99514792) を追加	Dec. 15, 2025, 12:41 p.m.
1	[2023年08月10日] 掲載	Aug. 10, 2023, 5:25 p.m.

NVD Vulnerability Information

CVE-2022-29879

Summary	A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00), SICAM P855 (All versions < V3.00). The web based management interface of affected devices does not employ special access protection for certain internal developer views. This could allow authenticated users to access critical device information.
Publication Date	May 20, 2022, 10:15 p.m.
Registration Date	May 21, 2022, 10 a.m.
Last Update	Nov. 21, 2024, 3:59 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa00-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa00-0aa0:-:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa00-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa00-2aa0:-:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa10-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa10-0aa0:-:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa10-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa10-2aa0:-:::::::*

Configuration5		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa30-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa30-0aa0:-:::::::*

Configuration6		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8500-0aa30-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8500-0aa30-2aa0:-:::::::*

Configuration7		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa01-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa01-0aa0:-:::::::*

Configuration8		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa01-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa01-2aa0:-:::::::*

Configuration9		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa02-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa02-0aa0:-:::::::*

Configuration10		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa02-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa02-2aa0:-:::::::*

Configuration11		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa11-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa11-0aa0:-:::::::*

Configuration12		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa11-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa11-2aa0:-:::::::*

Configuration13		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa12-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa12-0aa0:-:::::::*

Configuration14		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa12-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa12-2aa0:-:::::::*

Configuration15		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa31-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa31-0aa0:-:::::::*

Configuration16		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa31-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa31-2aa0:-:::::::*

Configuration17		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa32-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa32-0aa0:-:::::::*

Configuration18		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8501-0aa32-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8501-0aa32-2aa0:-:::::::*

Configuration19		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa00-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa00-0aa0:-:::::::*

Configuration20		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa00-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa00-2aa0:-:::::::*

Configuration21		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa10-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa10-0aa0:-:::::::*

Configuration22		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa10-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa10-2aa0:-:::::::*

Configuration23		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa30-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa30-0aa0:-:::::::*

Configuration24		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8550-0aa30-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8550-0aa30-2aa0:-:::::::*

Configuration25		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa01-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa01-0aa0:-:::::::*

Configuration26		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa01-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa01-2aa0:-:::::::*

Configuration27		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa02-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa02-0aa0:-:::::::*

Configuration28		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa02-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa02-2aa0:-:::::::*

Configuration29		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa11-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa11-0aa0:-:::::::*

Configuration30		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa11-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa11-2aa0:-:::::::*

Configuration31		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa12-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa12-0aa0:-:::::::*

Configuration32		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa12-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa12-2aa0:-:::::::*

Configuration33		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa31-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa31-0aa0:-:::::::*

Configuration34		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa31-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa31-2aa0:-:::::::*

Configuration35		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa32-0aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa32-0aa0:-:::::::*

Configuration36		or higher	or less	more than	less than
cpe:2.3:o:siemens:7kg8551-0aa32-2aa0_firmware::::::::					3.00
execution environment
1	cpe:2.3:h:siemens:7kg8551-0aa32-2aa0:-:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf		Patch Vendor Advisory
2	https://cert-portal.siemens.com/productcert/pdf/ssa-165073.pdf		Patch Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-306	重要な機能に対する認証の欠如解説	https://cwe.mitre.org/data/definitions/306.html