Siemens Desigo PXC4
At a glance
- Source
- NVD
- EPSS
- EPSS 2.03 % · percentile 81 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- siemens
- NVD status
- Modified
Description
A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such that it is possible to inject arbitrary content (e.g., XML tags) into the generated file. An attacker with restricted privileges, by poisoning any of the content used to generate XLS reports, could be able to leverage the application to deliver malicious files against higher-privileged users and obtain Remote Code Execution (RCE) against the administrator’s workstation.
Weaknesses (CWE)
- CWE-75 — Failure to Sanitize Special Elements into a Different Plane
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.0 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 8.5 | AV:N/AC:M/Au:S/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2022-28954
- GCVE · GCVE-0-2022-24039
CERT-FR advisories
- CERTFR-2022-AVI-435 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:siemens:desigo_pxc5_firmware:*:*:*:*:*:*:*:*< 02.20.142.10-10884cpe:2.3:o:siemens:desigo_pxc4_firmware:*:*:*:*:*:*:*:*< 02.20.142.10-10884
Affected products
| Product | Versions |
|---|---|
| Siemens · Desigo PXC4 | affected All versions < V02.20.142.10-10884 |
| Siemens · Desigo PXC5 | affected All versions < V02.20.142.10-10884 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |