MEDIUM🇵🇱 Wersja polska

CVE-2022-40178

CVSS 5.4v3.1pub. 2022-10-11upd. 2024-11-21

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the “Import Files“ functionality of the “Operation” web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Siemens Desigo Pxm30 1

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm30 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm30.e

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm30.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40 1

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm40 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40.e

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm40.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50 1

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm50 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50.e

    HW
    Siemens
    all versions

  • Siemens Desigo Pxm50.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w100 1

    HW
    Siemens
    all versions

  • Siemens Pxg3.w100 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w100 2

    HW
    Siemens
    all versions

  • Siemens Pxg3.w100 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w200 1

    HW
    Siemens
    all versions

  • Siemens Pxg3.w200 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w200 2

    HW
    Siemens
    all versions

  • Siemens Pxg3.w200 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-40176HIGH8.0same product

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40179HIGH8.1same product

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40181HIGH8.3same product

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40182HIGH8.8same product

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40177MEDIUM5.7same product

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...