description: A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to create a new user with administrative permissions.
problem types: CWE-306: Missing Authentication for Critical Function
affected:
{
product: SICAM GridEdge Essential ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
