https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:34:19.528307+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1001 certfr-2022-avi-1001 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-04T01:34:19.614384+00:00 certfr-2022-avi-1001 https://cve.radiocsirt.org/vuln/cnvd-2022-75541 cnvd-2022-75541 2026-10-04T01:34:19.614427+00:00 cnvd-2022-75541 https://cve.radiocsirt.org/vuln/euvd-2026-19623 EUVD-2026-19623 2026-10-04T01:34:19.614441+00:00 EUVD-2026-19623 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43398 fkie_cve-2022-43398 2026-10-04T01:34:19.614453+00:00

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

 https://cve.radiocsirt.org/vuln/ghsa-fph2-95mp-m2fq GHSA-fph2-95mp-m2fq 2026-10-04T01:34:19.614485+00:00

A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50). Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session.

 https://cve.radiocsirt.org/vuln/gsd-2022-43398 gsd-2022-43398 2026-10-04T01:34:19.614503+00:00 gsd-2022-43398 https://cve.radiocsirt.org/vuln/icsa-22-314-11 ICSA-22-314-11 — Siemens SICAM Q100 2026-10-04T01:34:19.614513+00:00

Affected devices do not renew the session cookie after login/logout and also accept user defined session cookies. An attacker could overwrite the stored session cookie of a user. After the victim logged in, the attacker is given access to the user's account through the activated session. Affected devices do not properly validate the Language-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device. Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device. Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1974 WID-SEC-W-2022-1974 — Siemens SICAM: Mehrere Schwachstellen 2026-10-04T01:34:19.614539+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.