CVE-2022-24045

🗓️ 10 May 2022 09:46:56Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 110 Views

Vulnerability in Desigo DXR2, PXC3, PXC4, PXC5 (CVE-2022-24045) - Session Cookie Security Issu

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-24045	20 May 202213:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 unit stations involves the absence of the “Secure”, “HttpOnly”, or “SameSite” flags in the session cookie files. This allows a malicious actor to gain unauthorized access to protected information.	31 May 202200:00	–	bdu_fstec
CNNVD	多款Siemens产品安全漏洞	11 May 202200:00	–	cnnvd
CNVD	Unspecified Vulnerability in Siemens Desigo PXC and DXR Devices (CNVD-2022-37374)	11 May 202200:00	–	cnvd
Cvelist	CVE-2022-24045	10 May 202209:46	–	cvelist
EUVD	EUVD-2022-28960	3 Oct 202520:07	–	euvd
ICS	Siemens Desigo PXC and DXR Devices	12 May 202200:00	–	ics
NVD	CVE-2022-24045	20 May 202213:15	–	nvd
OSV	CVE-2022-24045	20 May 202213:15	–	osv
Prion	Information disclosure	20 May 202213:15	–	prion

NVD

Node

siemens desigo_dxr2_firmwareRange<01.21.142.5-22

AND

siemens desigo_dxr2Match-

Node

siemens desigo_pxc3_firmwareRange<01.21.142.4-18

AND

siemens desigo_pxc3Match-

Node

siemens desigo_pxc4_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc4Match-

Node

siemens desigo_pxc5_firmwareRange<02.20.142.10-10884

AND

siemens desigo_pxc5Match-

[
  {
    "product": "Desigo DXR2",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V01.21.142.5-22"
      }
    ]
  },
  {
    "product": "Desigo PXC3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V01.21.142.4-18"
      }
    ]
  },
  {
    "product": "Desigo PXC4",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  },
  {
    "product": "Desigo PXC5",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V02.20.142.10-10884"
      }
    ]
  }
]