Desigo PXM40-1

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high3medium0low

updated 2026-10-27

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-40176US	high8.0	1.36% (72nd)	—	no fix	2022-10-11	—
CVE-2022-40182US	high8.8	1.02% (63rd)	—	no fix	2022-10-11	—
CVE-2022-40181US	high8.3	1.00% (63rd)	—	no fix	2022-10-11	—
CVE-2022-40177US	medium5.7	0.97% (62nd)	—	no fix	2022-10-11	—
CVE-2022-40178US	medium5.4	0.59% (48th)	—	no fix	2022-10-11	—
CVE-2022-40179US	high8.1	0.37% (30th)	—	no fix	2022-10-11	—
CVE-2022-40180US	medium5.3	0.29% (22nd)	—	no fix	2022-10-11	—

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-84Improper Neutralization of Encoded URI Schemes in a Web Page1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.