PT-2022-25257 · Siemens · Pxg3.W100-2+9

Published 2022-10-11 · Updated 2022-10-12 · CVE-2022-40177

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Desigo PXM30-1 versions prior to V02.20.126.11-41 Desigo PXM30.E versions prior to V02.20.126.11-41 Desigo PXM40-1 versions prior to V02.20.126.11-41 Desigo PXM40.E versions prior to V02.20.126.11-41 Desigo PXM50-1 versions prior to V02.20.126.11-41 Desigo PXM50.E versions prior to V02.20.126.11-41 PXG3.W100-1 versions prior to V02.20.126.11-37 PXG3.W100-2 versions prior to V02.20.126.11-41 PXG3.W200-1 versions prior to V02.20.126.11-37 PXG3.W200-2 versions prior to V02.20.126.11-41

Description A remote low-privileged attacker can read sensitive files on the device by supplying specific I/O related Axon queries to the "Operation" web application endpoints that interpret and execute Axon language queries, allowing file read access to the device file system with root privileges.

Recommendations For Desigo PXM30-1 versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For Desigo PXM30.E versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For Desigo PXM40-1 versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For Desigo PXM40.E versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For Desigo PXM50-1 versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For Desigo PXM50.E versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For PXG3.W100-1 versions prior to V02.20.126.11-37, update to version V02.20.126.11-37 or later. For PXG3.W100-2 versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later. For PXG3.W200-1 versions prior to V02.20.126.11-37, update to version V02.20.126.11-37 or later. For PXG3.W200-2 versions prior to V02.20.126.11-41, update to version V02.20.126.11-41 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-40177

Affected Products

Desigo Pxm30-1

Desigo Pxm30.E

Desigo Pxm40-1

Desigo Pxm40.E

Desigo Pxm50-1

Desigo Pxm50.E

Pxg3.W100-1

Pxg3.W100-2

Pxg3.W200-1

Pxg3.W200-2

References · 4

• https://osv.dev/vulnerability/CVE-2022-40177 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40177 · Security Note
• https://t.me/cibsecurity/51104 · Telegram Post