{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-40176", "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "dateUpdated": "2024-08-03T12:14:39.805Z", "dateReserved": "2022-09-08T00:00:00.000Z", "datePublished": "2022-10-11T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens", "dateUpdated": "2022-10-11T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). There exists an Improper Neutralization of Special Elements used in an OS Command with root privileges during a restore operation due to the missing validation of the names of files included in the input package. By restoring a specifically crafted package, a remote low-privileged attacker can execute arbitrary system commands with root privileges on the device, leading to a full compromise."}], "affected": [{"vendor": "Siemens", "product": "Desigo PXM30-1", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "Desigo PXM30.E", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "Desigo PXM40-1", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "Desigo PXM40.E", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "Desigo PXM50-1", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "Desigo PXM50.E", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "PXG3.W100-1", "versions": [{"version": "All versions < V02.20.126.11-37", "status": "affected"}]}, {"vendor": "Siemens", "product": "PXG3.W100-2", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}, {"vendor": "Siemens", "product": "PXG3.W200-1", "versions": [{"version": "All versions < V02.20.126.11-37", "status": "affected"}]}, {"vendor": "Siemens", "product": "PXG3.W200-2", "versions": [{"version": "All versions < V02.20.126.11-41", "status": "affected"}]}], "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "cweId": "CWE-78"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:14:39.805Z"}, "title": "CVE Program Container", "references": [{"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf", "tags": ["x_transferred"]}]}]}}

{}

{"affected": [{"affectedData": [{"product": "Desigo PXM30-1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "Desigo PXM30.E", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "Desigo PXM40-1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "Desigo PXM40.E", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "Desigo PXM50-1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "Desigo PXM50.E", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "PXG3.W100-1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-37"}]}, {"product": "PXG3.W100-2", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}, {"product": "PXG3.W200-1", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-37"}]}, {"product": "PXG3.W200-2", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V02.20.126.11-41"}]}], "source": "productcert@siemens.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm30-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA01FD1D-3B4F-44CB-85D5-D88190B264A3", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm30-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "837673FE-DBBB-496A-8A6F-0C53BC5F2EAD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm30.e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "863709BC-3A74-49E5-80F3-7E0227BD3403", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm30.e:-:*:*:*:*:*:*:*", "matchCriteriaId": "60A4FA01-FD7F-451F-8BEB-2BF01A2DF9B6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm40-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B63901A-F3B7-4232-973F-7E162608FEA0", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm40-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0AA432-2A2C-4A03-86C5-560592562653", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm40.e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "87180ACC-C1ED-4F20-9460-1AFD53D28CA2", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm40.e:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0517B82-90A9-4A0F-8B57-70F2A679DC95", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm50-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E14C8DD3-9FA4-497F-9F9F-235C8D2DEFA5", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm50-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "0BBE6D5C-A3AF-4191-A283-805B834D9475", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:desigo_pxm50.e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "663CD9F1-2455-4B73-9081-4FA3A1FD46D3", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:desigo_pxm50.e:-:*:*:*:*:*:*:*", "matchCriteriaId": "CECB9D5A-2654-4DE5-91CF-59DB43776FBC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:pxg3.w100-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5C23DFD-0362-4554-9761-3D684796C0DC", "versionEndExcluding": "02.20.126.11-37", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:pxg3.w100-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9805AE4-F07B-45F6-A1DD-53544E8AE681", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:pxg3.w100-2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "01049ABF-EAD0-4B8D-B54C-3424B435635A", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:pxg3.w100-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4924B858-7BB5-464F-B6E5-133B987FF122", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:pxg3.w200-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5FB1F863-2762-4839-A601-248BC0F8B6D5", "versionEndExcluding": "02.20.126.11-37", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:pxg3.w200-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CCA20E3-2425-4004-801F-46898ACDA2CD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:pxg3.w200-2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0903929A-B47C-4E75-A6B6-1DB4B118F64C", "versionEndExcluding": "02.20.126.11-41", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:pxg3.w200-2:-:*:*:*:*:*:*:*", "matchCriteriaId": "14AE1458-8F82-4F6D-987D-4F22AF5E8056", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). There exists an Improper Neutralization of Special Elements used in an OS Command with root privileges during a restore operation due to the missing validation of the names of files included in the input package. By restoring a specifically crafted package, a remote low-privileged attacker can execute arbitrary system commands with root privileges on the device, leading to a full compromise."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Desigo PXM30-1 (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM30.E (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM40-1 (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM40.E (Todas las versiones anteriores a V02.20.126.11-41), Desigo PXM50-1 (Todas las versiones anteriores a V02. 20.126.11-41), Desigo PXM50.E (Todas las versiones anteriores a V02.20.126.11-41), PXG3.W100-1 (Todas las versiones anteriores a V02.20.126.11-37), PXG3.W100-2 (Todas las versiones anteriores a V02.20.126.11-41), PXG3.W200-1 (Todas las versiones anteriores a V02.20.126.11-37), PXG3.W200-2 (Todas las versiones anteriores a V02.20.126.11-41). Se presenta una Neutralizaci\u00f3n Inapropiada de los Elementos Especiales usados en un Comando del Sistema Operativo privilegiado de root durante una operaci\u00f3n de restauraci\u00f3n, debido a una falta de comprobaci\u00f3n de los nombres de los archivos incluidos en el paquete de entrada. Al restaurar un paquete espec\u00edficamente dise\u00f1ado, un atacante remoto poco privilegiado puede ejecutar comandos arbitrarios del sistema privilegiado de root en el dispositivo, conllevando a un compromiso total"}], "id": "CVE-2022-40176", "lastModified": "2026-06-17T05:01:03.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-11T11:15:10.473", "references": [{"source": "productcert@siemens.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-360783.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "productcert@siemens.com", "type": "Secondary"}]}

{}

{}