CVE-2022-24041

🗓️ 10 May 2022 09:46:49Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 112 Views

A vulnerability has been identified in Desigo DXR2, Desigo PXC3, PXC4, and PXC5, allowing offline cracking of plaintext passwords

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-24041	10 May 202211:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules lies in the insufficient calculation of password hashes. This allows attackers to gain access to the devices by intercepting authentication tokens.	8 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-24041	10 May 202214:32	–	circl
CNNVD	多款Siemens产品安全漏洞	10 May 202200:00	–	cnnvd
CNVD	Siemens Desigo PXC and DXR Devices have unspecified vulnerabilities	11 May 202200:00	–	cnvd
Cvelist	CVE-2022-24041	10 May 202209:46	–	cvelist
EUVD	EUVD-2022-28956	3 Oct 202520:07	–	euvd
ICS	Siemens Desigo PXC and DXR Devices	12 May 202200:00	–	ics
NVD	CVE-2022-24041	10 May 202211:15	–	nvd
OSV	CVE-2022-24041	10 May 202211:15	–	osv

NVD

Node

siemens desigo_pxc5_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc5Match-

Node

siemens desigo_pxc4_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc4Match-

Node

siemens desigo_pxc3_firmwareRange<01.21.142.4-18

AND

siemens desigo_pxc3Match-

Node

siemens desigo_dxr2_firmwareRange<01.21.142.5-22

AND

siemens desigo_dxr2Match-

[
  {
    "product": "Desigo DXR2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V01.21.142.5-22"
      }
    ]
  },
  {
    "product": "Desigo PXC3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V01.21.142.4-18"
      }
    ]
  },
  {
    "product": "Desigo PXC4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  },
  {
    "product": "Desigo PXC5",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

17 Jun 2026 04:31Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.0044

CWE-916