CVE-2022-43398

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

• CWE-384
• CWE-384

• https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf

Published

Nov 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43390A command injection vulnerability in the CGI program of Zyxe…8.8
• CVE-2022-43391A buffer overflow vulnerability in the parameter of the CGI …6.5
• CVE-2022-43392A buffer overflow vulnerability in the parameter of web serv…6.5
• CVE-2022-43393An improper check for unusual or exceptional conditions in t…8.2
• CVE-2022-43396In the fix for CVE-2022-24697, a blacklist is used to filter…8.8
• CVE-2022-43397A vulnerability has been identified in Parasolid V34.0 (All …7.8
• CVE-2022-43399Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-4340The BookingPress WordPress plugin before 1.0.31 suffers from…5.3
• CVE-2022-43400A vulnerability has been identified in Siveillance Video Mob…9.8
• CVE-2022-43401A sandbox bypass vulnerability involving various casts perfo…9.9
• CVE-2022-43402A sandbox bypass vulnerability involving various casts perfo…9.9
• CVE-2022-43403A sandbox bypass vulnerability involving casting an array-li…9.9