MEDIUM🇬🇧 English

CVE-2022-40178

CVSS 5.4v3.1pub. 2022-10-11upd. 2024-11-21

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the “Import Files“ functionality of the “Operation” web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Siemens Desigo Pxm30 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm30 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm30.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm30.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm40 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm40.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm50 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm50.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w100 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w100 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w100 2

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w100 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w200 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w200 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w200 2

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w200 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje

Powiązane podatności

CVE-2022-40176HIGH8.0ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40179HIGH8.1ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40181HIGH8.3ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40182HIGH8.8ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40177MEDIUM5.7ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...