Siemens Desigo PXM Devices Execution with Unnecessary Privileges (CVE-2022-40182)

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

CVE-2022-40182

CVE-2022-40182 affects Siemens Desigo PXM devices (PXM30-1/PXM30.E/PXM40-1/PXM40.E/PXM50-1/PXM50.E, PXG3.W100-1/2, PXG3.W200-1/2) before V02.20.126.11-41 (and related W100/W200 builds). The root cause is that the embedded Chromium-based browser is launched as root with --no-sandbox, allowing an a...

CVE-2022-40182

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...