CVE-2022-24039

🗓️ 10 May 2022 09:46:46Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 87 Views

Vulnerability in Desigo PXC4 and PXC5 allows for XML injection leading to RC

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-24039	10 May 202211:15	–	attackerkb
Circl	CVE-2022-24039	10 May 202214:43	–	circl
CNNVD	Siemens Desigo PXC4 安全漏洞	10 May 202200:00	–	cnnvd
CNVD	Siemens Desigo PXC and DXR Devices Remote Code Execution Vulnerability	11 May 202200:00	–	cnvd
Cvelist	CVE-2022-24039	10 May 202209:46	–	cvelist
EUVD	EUVD-2022-28954	3 Oct 202520:07	–	euvd
ICS	Siemens Desigo PXC and DXR Devices	12 May 202200:00	–	ics
NVD	CVE-2022-24039	10 May 202211:15	–	nvd
Prion	Remote code execution	10 May 202211:15	–	prion
Positive Technologies	PT-2022-2567 · Siemens · Desigo Pxc4 +1	10 May 202200:00	–	ptsecurity

NVD

Node

siemens desigo_pxc5_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc5Match-

Node

siemens desigo_pxc4_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc4Match-

[
  {
    "product": "Desigo PXC4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  },
  {
    "product": "Desigo PXC5",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  }
]