« Volver al listado

CVE-2022-24045

Estado: ModificadaMedia (6.5)—

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The application, after a successful login, sets the session cookie on the browser via client-side JavaScript code, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”). Any attempts to browse the application via unencrypted HTTP protocol would lead to the transmission of all his/her session cookies in plaintext through the network. An attacker could then be able to sniff the network and capture sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Siemens — Desigo Dxr2 FirmwareSiemens — Desigo Pxc3 FirmwareSiemens — Desigo Pxc4 FirmwareSiemens — Desigo Pxc5 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-24045",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "Desigo DXR2",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V01.21.142.5-22"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC3",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V01.21.142.4-18"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC4",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V02.20.142.10-10884"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "Desigo PXC5",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V02.20.142.10-10884"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-05-20T13:15:14.600",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-614"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-311"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The application, after a successful login, sets the session cookie on the browser via client-side JavaScript code, without applying any security attributes (such as “Secure”, “HttpOnly”, or “SameSite”). Any attempts to browse the application via unencrypted HTTP protocol would lead to the transmission of all his/her session cookies in plaintext through the network. An attacker could then be able to sniff the network and capture sensitive information."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en Desigo DXR2 (Todas las versiones anteriores a V01.21.142.5-22), Desigo PXC3 (Todas las versiones anteriores a V01.21.142.4-18), Desigo PXC4 (Todas las versiones anteriores a V02.20.142.10-10884), Desigo PXC5 (Todas las versiones anteriores a V02.20.142.10-10884). La aplicación, tras un inicio de sesión con éxito, establece la cookie de sesión en el navegador por medio de código JavaScript del lado del cliente, sin aplicar ningún atributo de seguridad (como \"Secure\", \"HttpOnly\" o \"SameSite\"). Cualquier intento de navegar por la aplicación por medio del protocolo HTTP sin cifrar conllevaría a una transmisión de todas sus cookies de sesión en texto plano mediante la red. Un atacante podría entonces ser capaz de husmear en la red y capturar información confidencial"
    }
  ],
  "lastModified": "2026-06-17T04:31:12.570",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:desigo_dxr2_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B50EDDC-4B68-416E-B8BE-58399A90FE44",
              "versionEndExcluding": "01.21.142.5-22"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:desigo_dxr2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "21EDDCD7-3B64-410E-A294-0F5F65849F4E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:desigo_pxc3_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D7ABEE98-3FF4-4E7C-B1CD-0E5E56E437FF",
              "versionEndExcluding": "01.21.142.4-18"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:desigo_pxc3:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "373009ED-3AE4-4F0B-940D-8E82668C3FF3"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:desigo_pxc4_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84D6AF5F-AD6D-4A30-9D72-31A3BA2A5DC3",
              "versionEndExcluding": "02.20.142.10-10884"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:desigo_pxc4:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0327220F-B5E6-4722-AEB2-BC4C21F1060D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:desigo_pxc5_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B710014-DE57-43C2-9BFE-A4F8AF6542D5",
              "versionEndExcluding": "02.20.142.10-10884"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:desigo_pxc5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C4E2A7F6-B6E5-4230-8F13-64745C434A71"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}