CVE-2022-33139

Summary: CVE-2022-33139 affects Cerberus DMS, Desigo CC/CC Compact, and SIMATIC WinCC OA (V3.16–V3.18) when only client-side authentication is used and neither server-side authentication (SSA) nor Kerberos is enabled. In this configuration, attackers could impersonate other users or exploit the c...

CVE-2021-37181

CVE-2021-37181 describes a deserialization vulnerability in Siemens Desigo CC/Cerberus DMS products (Cerberus DMS v4.x/v5.0 prior to QU1; Desigo CC/Compact v4.x/v5.0 prior to QU1) due to insufficient validation of untrusted data in the CCOM communication component used by Windows App/Click-Once a...