A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cerberus DMS V4.0
Vendor
Siemens
Product
Cerberus DMS V4.0
Platforms
Unknown
Default status
Unknown
Cerberus DMS V4.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Cerberus DMS V4.1
Vendor
Siemens
Product
Cerberus DMS V4.1
Platforms
Unknown
Default status
Unknown
Cerberus DMS V4.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Cerberus DMS V4.2
Vendor
Siemens
Product
Cerberus DMS V4.2
Platforms
Unknown
Default status
Unknown
Cerberus DMS V4.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Cerberus DMS V5.0
Vendor
Siemens
Product
Cerberus DMS V5.0
Platforms
Unknown
Default status
Unknown
Cerberus DMS V5.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < v5.0 QU1
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC Compact V4.0
Vendor
Siemens
Product
Desigo CC Compact V4.0
Platforms
Unknown
Default status
Unknown
Desigo CC Compact V4.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC Compact V4.1
Vendor
Siemens
Product
Desigo CC Compact V4.1
Platforms
Unknown
Default status
Unknown
Desigo CC Compact V4.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC Compact V4.2
Vendor
Siemens
Product
Desigo CC Compact V4.2
Platforms
Unknown
Default status
Unknown
Desigo CC Compact V4.2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Desigo CC Compact V5.0
Vendor
Siemens
Product
Desigo CC Compact V5.0
Platforms
Unknown
Default status
Unknown
Desigo CC Compact V5.0 · Scoped product and version facts