CVE-2022-40178 (GCVE-0-2022-40178)
Vulnerability from cvelistv5
Published
2022-10-11 00:00
Modified
2024-08-03 12:14
Severity ?
CWE
  • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the “Import Files“ functionality of the “Operation” web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.
References
Impacted products
Vendor Product Version
Siemens Desigo PXM30-1 Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens Desigo PXM30.E Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens Desigo PXM40-1 Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens Desigo PXM40.E Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens Desigo PXM50-1 Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens Desigo PXM50.E Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens PXG3.W100-1 Version: All versions < V02.20.126.11-37
 Create a notification for this product.
   Siemens PXG3.W100-2 Version: All versions < V02.20.126.11-41
 Create a notification for this product.
   Siemens PXG3.W200-1 Version: All versions < V02.20.126.11-37
 Create a notification for this product.
   Siemens PXG3.W200-2 Version: All versions < V02.20.126.11-41
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T12:14:39.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Desigo PXM30-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "Desigo PXM30.E",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "Desigo PXM40-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "Desigo PXM40.E",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "Desigo PXM50-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "Desigo PXM50.E",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "PXG3.W100-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-37"
            }
          ]
        },
        {
          "product": "PXG3.W100-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        },
        {
          "product": "PXG3.W200-1",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-37"
            }
          ]
        },
        {
          "product": "PXG3.W200-2",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V02.20.126.11-41"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Desigo PXM30-1 (All versions \u003c V02.20.126.11-41), Desigo PXM30.E (All versions \u003c V02.20.126.11-41), Desigo PXM40-1 (All versions \u003c V02.20.126.11-41), Desigo PXM40.E (All versions \u003c V02.20.126.11-41), Desigo PXM50-1 (All versions \u003c V02.20.126.11-41), Desigo PXM50.E (All versions \u003c V02.20.126.11-41), PXG3.W100-1 (All versions \u003c V02.20.126.11-37), PXG3.W100-2 (All versions \u003c V02.20.126.11-41), PXG3.W200-1 (All versions \u003c V02.20.126.11-37), PXG3.W200-2 (All versions \u003c V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the \u201cImport Files\u201c functionality of the \u201cOperation\u201d web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-11T00:00:00",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-40178",
    "datePublished": "2022-10-11T00:00:00",
    "dateReserved": "2022-09-08T00:00:00",
    "dateUpdated": "2024-08-03T12:14:39.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-40178\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-10-11T11:15:10.590\",\"lastModified\":\"2024-11-21T07:21:00.273\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in Desigo PXM30-1 (All versions \u003c V02.20.126.11-41), Desigo PXM30.E (All versions \u003c V02.20.126.11-41), Desigo PXM40-1 (All versions \u003c V02.20.126.11-41), Desigo PXM40.E (All versions \u003c V02.20.126.11-41), Desigo PXM50-1 (All versions \u003c V02.20.126.11-41), Desigo PXM50.E (All versions \u003c V02.20.126.11-41), PXG3.W100-1 (All versions \u003c V02.20.126.11-37), PXG3.W100-2 (All versions \u003c V02.20.126.11-41), PXG3.W200-1 (All versions \u003c V02.20.126.11-37), PXG3.W200-2 (All versions \u003c V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the \u201cImport Files\u201c functionality of the \u201cOperation\u201d web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en Desigo PXM30-1 (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM30.E (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM40-1 (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM40.E (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM50-1 (Todas las versiones anteriores a V02. 20.126.11-41), Desigo PXM50.E (Todas las versiones anteriores a V02.20.126.11-41), PXG3.W100-1 (Todas las versiones anteriores a V02.20.126.11-37), PXG3.W100-2 (Todas las versiones anteriores a V02.20.126.11-41), PXG3.W200-1 (Todas las versiones anteriores a V02.20.126.11-37), PXG3.W200-2 (Todas las versiones anteriores a V02.20.126.11-41). Se presenta una Neutralizaci\u00f3n Inapropiada de la entrada Durante la Generaci\u00f3n de la P\u00e1gina Web en la funcionalidad \\\"Import Files\\\" de la aplicaci\u00f3n web \\\"Operation\\\", debido a una falta de comprobaci\u00f3n de los t\u00edtulos de los archivos incluidos en el paquete de entrada. Al descargar un paquete gr\u00e1fico espec\u00edficamente dise\u00f1ado, un atacante remoto poco privilegiado puede ejecutar c\u00f3digo JavaScript arbitrario\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm30-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"EA01FD1D-3B4F-44CB-85D5-D88190B264A3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm30-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"837673FE-DBBB-496A-8A6F-0C53BC5F2EAD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm30.e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"863709BC-3A74-49E5-80F3-7E0227BD3403\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm30.e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60A4FA01-FD7F-451F-8BEB-2BF01A2DF9B6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm40-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"1B63901A-F3B7-4232-973F-7E162608FEA0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm40-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA0AA432-2A2C-4A03-86C5-560592562653\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm40.e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"87180ACC-C1ED-4F20-9460-1AFD53D28CA2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm40.e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0517B82-90A9-4A0F-8B57-70F2A679DC95\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm50-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"E14C8DD3-9FA4-497F-9F9F-235C8D2DEFA5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm50-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0BBE6D5C-A3AF-4191-A283-805B834D9475\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:desigo_pxm50.e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"663CD9F1-2455-4B73-9081-4FA3A1FD46D3\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:desigo_pxm50.e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CECB9D5A-2654-4DE5-91CF-59DB43776FBC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:pxg3.w100-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-37\",\"matchCriteriaId\":\"D5C23DFD-0362-4554-9761-3D684796C0DC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:pxg3.w100-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9805AE4-F07B-45F6-A1DD-53544E8AE681\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:pxg3.w100-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"01049ABF-EAD0-4B8D-B54C-3424B435635A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:pxg3.w100-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4924B858-7BB5-464F-B6E5-133B987FF122\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:pxg3.w200-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-37\",\"matchCriteriaId\":\"5FB1F863-2762-4839-A601-248BC0F8B6D5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:pxg3.w200-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CCA20E3-2425-4004-801F-46898ACDA2CD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:pxg3.w200-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"02.20.126.11-41\",\"matchCriteriaId\":\"0903929A-B47C-4E75-A6B6-1DB4B118F64C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:pxg3.w200-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14AE1458-8F82-4F6D-987D-4F22AF5E8056\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.