SSA-626968: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices
Desigo PXC3, PXC4, PXC5 and DXR2 devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial of service condition, or perform remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24045US | medium6.5OT erhöht | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24044US | high7.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24043US | medium5.3 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24042US | critical9.1 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24041US | medium6.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24040US | medium6.5 | — | ||
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884),… | ||||
| CVE-2022-24039US | critical9.0 | — | ||
A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails t… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (26)
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo DXR2
Update to V01.21.142.5-22 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC3
Update to V01.21.142.4-18 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC4
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
- BehobenDesigo PXC5
Update to V02.20.142.10-10884 or later version. Please contact your local Siemens office for additional support in obtaining the update.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan