ICSA-22-132-10

Siemens Desigo PXC and DXR Devices

view advisory published 2022-05-12

Successful exploitation of these vulnerabilities could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial-of-service condition, perform remote code execution, or disable and reset a device to factory state.

describes (8)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-24045US	medium6.5OT elevated	0.60% (49th)	—	2022-05-20
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24044US	high7.5	0.90% (60th)	—	2022-05-20
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24043US	medium5.3	1.08% (65th)	—	2022-05-20
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24042US	critical9.1	0.98% (62nd)	—	2022-05-10
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24041US	medium6.5	0.48% (41st)	—	2022-05-10
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24040US	medium6.5	0.85% (58th)	—	2022-05-10
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…
CVE-2022-24039US	critical9.0	2.03% (81st)	—	2022-05-10
A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails t…
CVE-2021-41545US	high7.5	0.93% (60th)	—	2022-05-10
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-22-132-10 JSONself
ICS Advisory ICSA-22-132-10 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (32)

FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo DXR2
Siemens recommends updating to the latest software version: Desigo DXR2: Update to v01.21.142.5-22 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC3
Siemens recommends updating to the latest software version: Desigo PXC3: Update to v01.21.142.4-18 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC4
Siemens recommends updating to the latest software version: Desigo PXC4: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later
FixedDesigo PXC5
Siemens recommends updating to the latest software version: Desigo PXC5: Update to v02.20.142.10-10884 or later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan