SSA-626968: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices
Desigo PXC3, PXC4, PXC5 and DXR2 devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial of service condition, or perform remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24045US | medium6.5OT elevated | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24044US | high7.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24043US | medium5.3 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24042US | critical9.1 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24041US | medium6.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24040US | medium6.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24039US | critical9.0 | — | ||
A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails t… | ||||
references
External citations — patches, advisories, analysis.
remediations (26)
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- FixedDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan