CVE-2024-36140

mediumpriority · track · 22EPSS 0.003 · 25 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.32% (25th) EPSS

CVSS 5.4 · medium

Is it mine?

14 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2). The user accounts tab of affected devices is vulnerable to stored cross-site scripting (XSS) attacks. This could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with potential higher privileges than the attacker.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedOZW672siemens_psirt
Update to V5.2 or later version
FixedOZW772siemens_psirt
Update to V5.2 or later version
FixedOZW672cisa_csaf_ot
Update to V5.2 or later version
FixedOZW772cisa_csaf_ot
Update to V5.2 or later version

cvss

Technical severity, 0–10. One row per scoring source.

8.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.4–8.2

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 2.3 · impact 2.7

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · CISA US

v3.16.8mediumAV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · NCSC-NL NL

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · productcert@siemens.com DEexploitability 2.3 · impact 4

v3.16.8mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:Nsecondary · Siemens ProductCERT DE

v4.08.2highCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:Nsecondary · ENISA EU

v4.08.2highCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.05.6mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-79USCWE-79USCWE-79USCWE-79USCWE-79US

affected products (14)

Products and version ranges known to be affected.

OZW672all versionscisa_csaf_otUS
OZW772all versionscisa_csaf_otUS
Siemens OZW672< V5.2cisa_csaf_otUS
Siemens OZW772< V5.2cisa_csaf_otUS
Siemens OZW6720 → V5.2enisa_euvdEU
Siemens OZW7720 → V5.2enisa_euvdEU
Siemens AG OZW672≤ 5.2fstec_bduRU
Siemens AG OZW772≤ 5.2fstec_bduRU
ozw672all versionsncsc_nlNLcpe:2.3:a:siemens:ozw672:*:*:*:*:*:*:*:*
ozw772all versionsncsc_nlNLcpe:2.3:a:siemens:ozw772:*:*:*:*:*:*:*:*
siemens ozw672 firmware< 5.2nvdUScpe:2.3:o:siemens:ozw672_firmware:*:*:*:*:*:*:*:*
siemens ozw772 firmware< 5.2nvdUScpe:2.3:o:siemens:ozw772_firmware:*:*:*:*:*:*:*:*
Siemens OZW672≤ vers:all/<V5.2siemens_psirtDE
Siemens OZW772≤ vers:all/<V5.2siemens_psirtDE

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2024-0433Kwetsbaarheden verholpen in Siemens productenNL2024-11-12csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.
SSA-230445SSA-230445: Stored XSS Vulnerability in OZW Web Servers Before V5.22024-11-12csaf · siemens_psirtDE
OZW672 and OZW772 Web Server versions before V5.2 contain a stored cross-site scripting (XSS) vulnerability that could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with potential higher privileges than the attacker. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-24-319-03Siemens OZW672 and OZW772 Web Server2024-11-12icsa · cisa_csaf_otUS
OZW672 and OZW772 Web Server versions before V5.2 contain a stored cross-site scripting (XSS) vulnerability that could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with potential higher privileges than the attacker. Siemens has released new versions for the affected products and recommends to update to the latest versions.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl nvd siemens_psirt NVD CVE.org MITRE

published 2024-11-12modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan