CVE-2022-43545

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

• CWE-20
• CWE-20

• https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf

Published

Nov 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43539 A vulnerability exists in the ClearPass Policy Manager clus…4.5
• CVE-2022-4354A vulnerability was found in LinZhaoguan pb-cms 2.0 and clas…9.6
• CVE-2022-43540A vulnerability exists in the ClearPass OnGuard macOS agent …5.5
• CVE-2022-43541Vulnerabilities in the Aruba EdgeConnect Enterprise command …7.2
• CVE-2022-43542Vulnerabilities in the Aruba EdgeConnect Enterprise command …8.8
• CVE-2022-43543KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Me…5.4
• CVE-2022-43546A vulnerability has been identified in POWER METER SICAM Q10…8.8
• CVE-2022-43548A OS Command Injection vulnerability exists in Node.js versi…8.1
• CVE-2022-43549Improper authentication in Veeam Backup for Google Cloud v1.…9.8
• CVE-2022-4355The LetsRecover WordPress plugin before 1.2.0 does not prope…7.2
• CVE-2022-43550A command injection vulnerability exists in Jitsi before com…9.8
• CVE-2022-43551A vulnerability exists in curl <7.87.0 HSTS check that could…7.5