CVE-2024-22039
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Summary
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow. This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Siemens | Cerberus PRO EN Engineering Tool | 0 < IP8 | affected |
| Siemens | Cerberus PRO EN Fire Panel FC72x IP6 | 0 < IP6 SR3 | affected |
| Siemens | Cerberus PRO EN Fire Panel FC72x IP7 | 0 < IP7 SR5 | affected |
| Siemens | Cerberus PRO EN X200 Cloud Distribution IP7 | 0 < V3.0.6602 | affected |
| Siemens | Cerberus PRO EN X200 Cloud Distribution IP8 | 0 < V4.0.5016 | affected |
| Siemens | Cerberus PRO EN X300 Cloud Distribution IP7 | 0 < V3.2.6601 | affected |
| Siemens | Cerberus PRO EN X300 Cloud Distribution IP8 | 0 < V4.2.5015 | affected |
| Siemens | Cerberus PRO UL Compact Panel FC922/924 | 0 < MP4 | affected |
| Siemens | Cerberus PRO UL Engineering Tool | 0 < MP4 | affected |
| Siemens | Cerberus PRO UL X300 Cloud Distribution | 0 < V4.3.0001 | affected |
| Siemens | Desigo Fire Safety UL Compact Panel FC2025/2050 | 0 < MP4 | affected |
| Siemens | Desigo Fire Safety UL Engineering Tool | 0 < MP4 | affected |
| Siemens | Desigo Fire Safety UL X300 Cloud Distribution | 0 < V4.3.0001 | affected |
| Siemens | Sinteso FS20 EN Engineering Tool | 0 < MP8 | affected |
| Siemens | Sinteso FS20 EN Fire Panel FC20 MP6 | 0 < MP6 SR3 | affected |
| Siemens | Sinteso FS20 EN Fire Panel FC20 MP7 | 0 < MP7 SR5 | affected |
| Siemens | Sinteso FS20 EN X200 Cloud Distribution MP7 | 0 < V3.0.6602 | affected |
| Siemens | Sinteso FS20 EN X200 Cloud Distribution MP8 | 0 < V4.0.5016 | affected |
| Siemens | Sinteso FS20 EN X300 Cloud Distribution MP7 | 0 < V3.2.6601 | affected |
| Siemens | Sinteso FS20 EN X300 Cloud Distribution MP8 | 0 < V4.2.5015 | affected |
| Siemens | Sinteso Mobile | 0 < V3.0.0 | affected |
Weaknesses
- CWE-120: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
CVE Program Container
Additional References
- https://cert-portal.siemens.com/productcert/html/ssa-225840.html
- https://cert-portal.siemens.com/productcert/html/ssa-953710.html
References
- https://cert-portal.siemens.com/productcert/html/ssa-225840.html
- https://cert-portal.siemens.com/productcert/html/ssa-953710.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.