Republished vendor advisory. This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
General Recommendations: As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Credit: Siemens ProductCERT
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-22039 | CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 10.0 Critical |
CVE-2024-22039 The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow. This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges. Vendor fix: Update to MP4 or later version Vendor fix: Update to V4.3.0001 or later version Affected, fixed & timelineAffected:
|
| CVE-2024-22040 | CWE-125 Out-of-bounds Read | 7.5 High |
CVE-2024-22040 The network communication library in affected systems insufficiently validates HMAC values which might result in a buffer overread. This could allow an unauthenticated remote attacker to crash the network service. Vendor fix: Update to MP4 or later version Vendor fix: Update to V4.3.0001 or later version Affected, fixed & timelineAffected:
|
| CVE-2024-22041 | CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer | 7.5 High |
CVE-2024-22041 The network communication library in affected systems improperly handles memory buffers when parsing X.509 certificates. This could allow an unauthenticated remote attacker to crash the network service. Vendor fix: Update to MP4 or later version Vendor fix: Update to V4.3.0001 or later version Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-22039 | 10.0 Critical | Siemens Cerberus PRO EN Engineering Tool A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP… |
| CVE-2024-22040 | 7.5 High | Siemens Cerberus PRO EN Engineering Tool A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus… |
| CVE-2024-22041 | 7.5 High | Siemens Cerberus PRO EN Engineering Tool A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus… |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.