A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded Chromium-based browser is launched as root with the β--no-sandboxβ option. Attackers can add arbitrary JavaScript code inside βOperationβ graphics and successfully exploit any number of publicly known vulnerabilities against the version of the embedded Chromium-based browser.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSiemens Desigo Pxm30 1
HWSiemenswszystkie wersjeSiemens Desigo Pxm30 1 Firmware
OSSiemens< 02.20.126.11-41Siemens Desigo Pxm30.e
HWSiemenswszystkie wersjeSiemens Desigo Pxm30.e Firmware
OSSiemens< 02.20.126.11-41Siemens Desigo Pxm40 1
HWSiemenswszystkie wersjeSiemens Desigo Pxm40 1 Firmware
OSSiemens< 02.20.126.11-41Siemens Desigo Pxm40.e
HWSiemenswszystkie wersjeSiemens Desigo Pxm40.e Firmware
OSSiemens< 02.20.126.11-41Siemens Desigo Pxm50 1
HWSiemenswszystkie wersjeSiemens Desigo Pxm50 1 Firmware
OSSiemens< 02.20.126.11-41Siemens Desigo Pxm50.e
HWSiemenswszystkie wersjeSiemens Desigo Pxm50.e Firmware
OSSiemens< 02.20.126.11-41Siemens Pxg3.w100 1
HWSiemenswszystkie wersjeSiemens Pxg3.w100 1 Firmware
OSSiemens< 02.20.126.11-37Siemens Pxg3.w100 2
HWSiemenswszystkie wersjeSiemens Pxg3.w100 2 Firmware
OSSiemens< 02.20.126.11-41Siemens Pxg3.w200 1
HWSiemenswszystkie wersjeSiemens Pxg3.w200 1 Firmware
OSSiemens< 02.20.126.11-37Siemens Pxg3.w200 2
HWSiemenswszystkie wersjeSiemens Pxg3.w200 2 Firmware
OSSiemens< 02.20.126.11-41
Related vulnerabilities
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...