description: A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software does not apply cross-origin resource sharing (CORS) restrictions for critical operations. In case an attacker tricks a legitimate user into accessing a special resource a malicious request could be executed.
problem types: CWE-346: Origin Validation Error
affected:
{
product: SICAM GridEdge Essential ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
