Lucene search
K

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 unit stations involves the absence of the “Secure”, “HttpOnly”, or “SameSite” flags in the session cookie files. This allows a malicious actor to gain unauthorized access to protected information.

🗓️ 31 May 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 4 Views

Session cookies on Desigo DXR2 and PXC3/4/5 devices lack Secure, HttpOnly, and SameSite flags, enabling unauthorized access.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2022-24045
20 May 202213:15
attackerkb
CNNVD
多款Siemens产品安全漏洞
11 May 202200:00
cnnvd
CNVD
Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-37374)
11 May 202200:00
cnvd
CVE
CVE-2022-24045
10 May 202209:46
cve
Cvelist
CVE-2022-24045
10 May 202209:46
cvelist
EUVD
EUVD-2022-28960
3 Oct 202520:07
euvd
ICS
Siemens Desigo PXC and DXR Devices
12 May 202200:00
ics
NVD
CVE-2022-24045
20 May 202213:15
nvd
OSV
CVE-2022-24045
20 May 202213:15
osv
Prion
Information disclosure
20 May 202213:15
prion
Rows per page
Vulners
Node
siemens_agdesigo_pxc5Range<02.20.142.10-10884
OR
siemens_agdesigo_pxc4Range<02.20.142.10-10884
OR
siemens_agdesigo_pxc3Range<01.21.142.4-18
OR
siemens_agdesigo_dxr2Range<01.21.142.5-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 May 2022 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 36.5
CVSS 27.8
EPSS0.00537
4