The vulnerability of the network communication library of the software-hardware systems for Siemens Fire Safety products, namely Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile, allows a perpetrator to cause service interruptions.

🗓️ 22 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Issue in Cerberus Pro and Sinteso networks allows out-of-bounds memory reads, causing service interruptions.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-22040	12 Mar 202412:26	–	circl
CNNVD	Siemens 多款产品缓冲区错误漏洞	12 Mar 202400:00	–	cnnvd
CNVD	Siemens Sinteso EN and Cerberus PRO EN Fire Protection Systems Out-of-Bounds Read Vulnerability	13 Mar 202400:00	–	cnvd
CVE	CVE-2024-22040	12 Mar 202410:21	–	cve
Cvelist	CVE-2024-22040	12 Mar 202410:21	–	cvelist
EUVD	EUVD-2024-19643	3 Oct 202520:07	–	euvd
ICS	Siemens Sinteso EN Cerberus PRO EN Fire Protection Systems	12 Mar 202400:00	–	ics
ICS	Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems	14 May 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Mar 202400:00	–	ncsc
NVD	CVE-2024-22040	12 Mar 202411:15	–	nvd

Vulners

Node

siemens_ag cerberus_pro_en_x200_cloud_distributionRange<4.3.5618

OR

siemens_ag cerberus_pro_en_x300_cloud_distributionRange<4.3.5617

OR

siemens_ag sinteso_fs20_en_x200_cloud_distributionRange<4.3.5618

OR

siemens_ag sinteso_fs20_en_x300_cloud_distributionRange<4.3.5617

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-225840.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024031318
web	www.web.nvd.nist.gov/view/vuln/detail

22 Mar 2024 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 27.8

EPSS0.00832

cerberus pro sinteso networks memory reads service interruptions security vulnerability