CRITICAL🇵🇱 Wersja polska

CVE-2022-24042

CVSS 9.1v3.1pub. 2022-05-10upd. 2024-11-21

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application returns an AuthToken that does not expire at the defined auto logoff delay timeout. An attacker could be able to capture this token and re-use old session credentials or session IDs for authorization.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

  • Siemens Desigo Dxr2

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Dxr2 Firmware

    OS
    Siemens
    < 01.21.142.5-22

  • Siemens Desigo Pxc3

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxc3 Firmware

    OS
    Siemens
    < 01.21.142.4-18

  • Siemens Desigo Pxc4

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxc4 Firmware

    OS
    Siemens
    < 02.20.142.10-10884

  • Siemens Desigo Pxc5

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxc5 Firmware

    OS
    Siemens
    < 02.20.142.10-10884
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-24039CRITICAL9.0ten sam produkt

A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All vers...

CVE-2022-24044HIGH7.5ten sam produkt

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions...

CVE-2021-41545HIGH7.5ten sam produkt

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions...

CVE-2022-24045MEDIUM6.5ten sam produkt

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions...

CVE-2022-24043MEDIUM5.3ten sam produkt

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions...