Design/Logic Flaw

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

CVE-2022-40181

CVE-2022-40181 affects Siemens Desigo PXM devices (PXM30-1, PXM30.E, PXM40-1, PXM40.E, PXM50-1, PXM50.E, PXG3.W100-1, PXG3.W100-2, PXG3.W200-1, PXG3.W200-2). The embedded browser fails to neutralize encoded URI schemes when redirected to resources by web app code, enabling a remote, low-privilege...

CVE-2022-40177

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

CVE-2022-40182

CVE-2022-40182 affects Siemens Desigo PXM devices (PXM30-1/PXM30.E/PXM40-1/PXM40.E/PXM50-1/PXM50.E, PXG3.W100-1/2, PXG3.W200-1/2) before V02.20.126.11-41 (and related W100/W200 builds). The root cause is that the embedded Chromium-based browser is launched as root with --no-sandbox, allowing an a...

CVE-2022-40178

CVE-2022-40178 affects Siemens Desigo devices (PXM30-1/30.E/40-1/40.E/50-1/50.E and PXG3 W100-1/2, W200-1/2) with webserver Import Files validation gaps. All listed versions before V02.20.126.11-41 (and for some PXG3 variants, before 02.20.126.11-37/41) are vulnerable to improper neutralization o...

CVE-2022-40180

Siemens Desigo Desigo PXM devices (PXM30-1, PXM30.E, PXM40-1, PXM40.E, PXM50-1, PXM50.E, PXG3.W100-1, W100-2, W200-1, W200-2) are affected by CVE-2022-40180 due to a Cross-Site Request Forgery in the Import Files function of the Operation web application. The root cause is missing anti-CSRF valid...

CVE-2022-40179

CVE-2022-40179 affects Siemens Desigo PXM devices (PXM30-1/30.E/40-1/40.E/50-1/50.E and PXG3.W100-1/2, W200-1/2) with vulnerable webserver versions prior to V02.20.126.11-41 (and similar for specific PXG3/W firmware). The issue is a Cross-Site Request Forgery in the Operation web application that...

CVE-2022-40176

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

Siemens Desigo PXM Devices

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Desigo PXM Devices Vulnerabilities: OS Command Injection, Exposure of Sensitive Information to an Unauthorized Actor, Cross-Site Scripting, Cross-Site Request Forgery, Improper...

The vulnerability of the `cv::PxMDecoder::readData` function in the `grfmt_pxm.cpp` component of the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source computer vision. This vulnerability allows a attacker to cause a service denial.

The vulnerability of the cv::PxMDecoder::readData function in the grfmtpxm.cpp component of the Computer Vision, Image Processing, and Numerical Algorithms General Purpose Library OpenSource Computer Vision Library – OpenCV is related to the execution of operations outside of the buffer in memory...

UBUNTU-CVE-2017-17760

OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmtpxm.cpp, because an incorrect size value is used...

Opencv Integer Overflow Vulnerability

OpenCV is an open source, cross-platform, lightweight computer vision library. An integer overflow vulnerability exists in the 'ReadNumber' function of the opencv/modules/imgcodecs/src/grfmtpxm.cpp file in OpenCV 3.3 and earlier versions, which stems from the program's failure to detect the lengt...

DEBIAN-CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

UBUNTU-CVE-2017-12862

In modules/imgcodecs/src/grfmtpxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

UBUNTU-CVE-2017-12864

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...