CVE-2022-24039

🗓️ 10 May 2022 09:46:46Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 139 Views

Vulnerability in Desigo PXC4 and PXC5 allows for XML injection leading to RC

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2022-24039	10 May 202211:15	–	attackerkb
BDU FSTEC	AddCell Function Code Execution	18 May 202200:00	–	bdu_fstec
Circl	CVE-2022-24039	10 May 202214:43	–	circl
CNNVD	Siemens Desigo PXC4 security vulnerabilities	10 May 202200:00	–	cnnvd
CNVD	Siemens Desigo PXC and DXR Devices Remote Code Execution Vulnerability	11 May 202200:00	–	cnvd
Cvelist	CVE-2022-24039	10 May 202209:46	–	cvelist
EUVD	EUVD-2022-28954	3 Oct 202520:07	–	euvd
ICS	Siemens Desigo PXC and DXR Devices	12 May 202200:00	–	ics
NVD	CVE-2022-24039	10 May 202211:15	–	nvd
osv_cve	CVE-2022-24039	10 May 202211:15	–	osv_cve

NVD

Vulners

Node

AND

siemens desigo_pxc5_firmwareRange<02.20.142.10-10884

siemens desigo_pxc5Match-

Node

AND

siemens desigo_pxc4_firmwareRange<02.20.142.10-10884

siemens desigo_pxc4Match-

[
  {
    "product": "Desigo PXC4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  },
  {
    "product": "Desigo PXC5",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  }
]