7.5
Élevée
CVE-2024-23815 A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is…
Description
A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), Desigo CC (All versions if access from Installed Clients to Desigo CC server is only allowed within highly protected zones). The affected server application fails to authenticate specific client requests. Modification of the client binary could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database via the event port (default: 4998/tcp)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Desigo CC | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Desigo CC
Les 5 CVE de Desigo CC →
CVE-2026-109619
RCE via stale global state
9.2
Critique
CVE-2026-109618
RCE via OOM corruption
9.2
Critique
CVE-2022-33139
A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All…
Non notée
CVE-2021-31891
A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions…
Non notée