Siemens ProductCERT Patch Day — October 2022
Tuesday, 11 October 2022
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 3
-
Critical 9.8
CVE-2022-36361 A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6…EPSS 1.1%
-
Critical 9.8
CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P8…EPSS 1.4%
- Critical 9.3
All vulnerabilities 22
Critical3 ShowHide
-
Critical 9.8
CVE-2022-36361 A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6…EPSS 1.1%
-
Critical 9.8
CVE-2022-41665 A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P8…EPSS 1.4%
- Critical 9.3
High7 ShowHide
-
High 8.8
CVE-2022-31765 Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privilege…EPSS 1.1%
-
High 8.6
CVE-2022-31766 A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.1.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2D…EPSS 1.2%
- High 7.8
-
High 7.5
CVE-2022-36362 A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo …EPSS 1%
-
High 7.5
CVE-2022-38371 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All …EPSS 1.6%
- High 7.5
- High 7.5
Medium1 ShowHide
- Medium 5.3
Unscored11 ShowHide
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2022-40176 A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All …EPSS 1.4%
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2022-40181 A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All …EPSS 1%
-
Unscored
CVE-2022-40182 A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All …EPSS 1%
- Unscored