Critical ICSA-22-132-10 8 CVEs

Siemens Desigo PXC and DXR Devices

Published May 12, 2022 · Updated Jun 16, 2022 · Revision 2

Vendor: Siemens Product: Desigo DXR2 Product: Desigo PXC3 Product: Desigo PXC4 Product: Desigo PXC5

Summary

Successful exploitation of these vulnerabilities could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial-of-service condition, perform remote code execution, or disable and reset a device to factory state.

Vulnerabilities 8

Unscored —

CVE-2021-41545

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo DXR2 Desigo PXC3 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24039

A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V0…

Siemens Desigo PXC4 Desigo PXC5 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24040

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo DXR2 Desigo PXC3 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24041

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo PXC5 Desigo DXR2 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24042

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo PXC3 Desigo PXC5 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24043

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo PXC5 Desigo DXR2 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24044

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo PXC3 Desigo PXC5 ICS / OT

May 10, 2022
Unscored —

CVE-2022-24045

A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21…

Siemens Desigo PXC4 Desigo PXC3 Desigo PXC5 ICS / OT

May 10, 2022

Revision history

2022-06-16 #2
ICSA-22-132-10 Siemens Desigo PXC and DXR Devices (Update A)
2022-05-12 #1
ICSA-22-132-10 Siemens Desigo PXC and DXR Devices

References

ICS Advisory ICSA-22-132-10 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-132-10
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B