CVE-2022-27480

A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require an user to be authenticated to access certain files. This could allow unauthenticated attackers to download these files.

• CWE-862
• CWE-425

• http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Apr/20Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdfPatch, Vendor Advisory
• http://packetstormsecurity.com/files/166743/Siemens-A8000-CP-8050-CP-8031-SICAM-WEB-Missing-File-Download-Missing-Authentication.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Apr/20Mailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-316850.pdfPatch, Vendor Advisory

Published

Apr 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27475Cross site scripting (XSS) vulnerability in tramyardg hotel-…6.1
• CVE-2022-27476A cross-site scripting (XSS) vulnerability at /admin/goods/u…6.1
• CVE-2022-27477Newbee-Mall v1.0.0 was discovered to contain an arbitrary fi…9.8
• CVE-2022-27478Victor v1.0 was discovered to contain a remote code executio…8.8
• CVE-2022-27479Apache Superset before 1.4.2 is vulnerable to SQL injection …9.8
• CVE-2022-2748A vulnerability was found in SourceCodester Simple Online Bo…6.1
• CVE-2022-27481A vulnerability has been identified in SCALANCE W1788-1 M12 …5.3
• CVE-2022-27482A improper neutralization of special elements used in an os …7.8
• CVE-2022-27483A improper neutralization of special elements used in an os …7.2
• CVE-2022-27484A unverified password change in Fortinet FortiADC version 6.…4.3
• CVE-2022-27485A improper neutralization of special elements used in an sql…6.5
• CVE-2022-27486A improper neutralization of special elements used in an os …7.8