HIGH🇬🇧 English

CVE-2022-40181

CVSS 8.3v3.1pub. 2022-10-11upd. 2024-11-21

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded browser does not prevent interaction with alternative URI schemes when redirected to corresponding resources by web application code. By setting the homepage URI, the favorite URIs, or redirecting embedded browser users via JavaScript code to alternative scheme resources, a remote low privileged attacker can perform a range of attacks against the device, such as read arbitrary files on the filesystem, execute arbitrary JavaScript code in order to steal or manipulate the information on the screen, or trigger denial of service conditions.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

  • Siemens Desigo Pxm30 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm30 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm30.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm30.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm40 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm40.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm40.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm50 1 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Desigo Pxm50.e

    HW
    Siemens
    wszystkie wersje

  • Siemens Desigo Pxm50.e Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w100 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w100 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w100 2

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w100 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41

  • Siemens Pxg3.w200 1

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w200 1 Firmware

    OS
    Siemens
    < 02.20.126.11-37

  • Siemens Pxg3.w200 2

    HW
    Siemens
    wszystkie wersje

  • Siemens Pxg3.w200 2 Firmware

    OS
    Siemens
    < 02.20.126.11-41
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoSXSS
CWE
Referencje

Powiązane podatności

CVE-2022-40176HIGH8.0ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40179HIGH8.1ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40182HIGH8.8ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40177MEDIUM5.7ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...

CVE-2022-40178MEDIUM5.4ten sam produkt

A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All v...