cve-2022-43546
Vulnerability from cvelistv5
Published
2022-11-08 00:00
Modified
2024-10-21 16:08
Severity ?
9.9 (Critical) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.
References
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdfMitigation, Patch, Vendor Advisory
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf
productcert@siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
Impacted products
SiemensPOWER METER SICAM Q100
SiemensPOWER METER SICAM Q100
SiemensPOWER METER SICAM Q100
SiemensPOWER METER SICAM Q100
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P850
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
SiemensSICAM P855
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:32:59.647Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:siemens:sicam_q100_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sicam_q100_firmware",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "2.50",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:sicam_p850_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sicam_p850_firmware",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "3.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:siemens:sicam_p855_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sicam_p855_firmware",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "3.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-43546",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T17:16:01.044378Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-21T16:08:33.311Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "POWER METER SICAM Q100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.50"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "POWER METER SICAM Q100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.50"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "POWER METER SICAM Q100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.50"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "POWER METER SICAM Q100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.50"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P850",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SICAM P855",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10). Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-01-09T09:58:41.480Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-43546",
    "datePublished": "2022-11-08T00:00:00",
    "dateReserved": "2022-10-20T00:00:00",
    "dateUpdated": "2024-10-21T16:08:33.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-43546\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-11-08T11:15:12.127\",\"lastModified\":\"2024-01-09T10:15:14.907\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), POWER METER SICAM Q100 (All versions \u003c V2.50), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P850 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10), SICAM P855 (All versions \u003c V3.10). Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en la familia POWER METER SICAM Q200 (Todas las versiones \u0026lt; V2.70), \\nSICAM P850 (Todas las versiones \u0026lt; V3.10), \\nSICAM P850 (Todas las versiones \u0026lt; V3.10), \\nSICAM P850 (Todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3. 10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10) , \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P850 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 ( Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3. 10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10), \\nSICAM P855 (todas las versiones \u0026lt; V3.10) , \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10), \\nSICAM P855 (Todas las versiones \u0026lt; V3.10). \\nLos dispositivos afectados no validan correctamente el par\u00e1metro EndTime en las solicitudes a la interfaz web en el puerto 443/tcp. Esto podr\u00eda permitir que un atacante remoto autenticado bloquee el dispositivo (seguido de un reinicio autom\u00e1tico) o ejecute c\u00f3digo arbitrario en el dispositivo.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.9,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.1,\"impactScore\":6.0}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg9501-0aa01-2aa1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.50\",\"matchCriteriaId\":\"821380FC-8F3A-4437-94FF-FB95D9F187D0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg9501-0aa01-2aa1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"275E9296-AACA-4F3B-B8FA-D52A59E729DE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:7kg9501-0aa31-2aa1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.50\",\"matchCriteriaId\":\"AEE155DF-AB9B-4A85-A845-AF1B51B05833\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:7kg9501-0aa31-2aa1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC260D4F-53BD-433C-AE8F-FA2FA47BC921\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Mitigation\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf\",\"source\":\"productcert@siemens.com\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.