Siemens Sinteso EN and Cerberus PRO EN Fire Protection Systems Buffer Overflow Vulnerability

Cerberus PRO EN is a fire protection system consisting of fire panels, detection and management stations. It is available to Siemens partners and complies with the European standard EN 54 for fire detection and alarm systems. Sinteso EN is a fire protection system consisting of fire panels, detection and management stations. It complies with the European standard EN 54 for fire detection and alarm systems. Sinteso Mobile is a mobile application for remote access to the Sinteso/Cerberus PRO EN fire protection system. A buffer overflow vulnerability exists in Siemens Sinteso EN and Cerberus PRO EN Fire Protection Systems due to a failure of the network communication library in the affected systems to properly handle memory buffers when parsing X.509 certificates. An attacker could exploit this vulnerability to crash a network service.