- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A), MAMMOMAT Revelation (All VC20 versions < VC20D), NAEOTOM Alpha (All VA40 versions < VA40 SP2), SOMATOM X.cite (All versions < VA30 SP5 or VA40 SP2), SOMATOM X.creed (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.All (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Now (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Open Pro (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Sim (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Top (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Up (All versions < VA30 SP5 or VA40 SP2), Symbia E/S (All VB22 versions < VB22A-UD03), Symbia Evo (All VB22 versions < VB22A-UD03), Symbia Intevo (All VB22 versions < VB22A-UD03), Symbia T (All VB22 versions < VB22A-UD03), Symbia.net (All VB22 versions < VB22A-UD03), syngo.via VB10 (All versions), syngo.via VB20 (All versions), syngo.via VB30 (All versions), syngo.via VB40 (All versions < VB40B HF06), syngo.via VB50 (All versions), syngo.via VB60 (All versions < VB60B HF02). The application deserialises untrusted data without sufficient validations that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system if ports 32912/tcp or 32914/tcp are reachable.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Biograph Horizon PET/CT Systems
- Vendor
- Siemens
- Product
- Biograph Horizon PET/CT Systems
- Platforms
- Unknown
- Default status
Unknown
Biograph Horizon PET/CT Systems · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VJ30 versions < VJ30C-UD01 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
MAGNETOM Family
- Vendor
- Siemens
- Product
- MAGNETOM Family
- Platforms
- Unknown
- Default status
Unknown
MAGNETOM Family · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
MAMMOMAT Revelation
- Vendor
- Siemens
- Product
- MAMMOMAT Revelation
- Platforms
- Unknown
- Default status
Unknown
MAMMOMAT Revelation · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VC20 versions < VC20D | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
NAEOTOM Alpha
- Vendor
- Siemens
- Product
- NAEOTOM Alpha
- Platforms
- Unknown
- Default status
Unknown
NAEOTOM Alpha · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VA40 versions < VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM X.cite
- Vendor
- Siemens
- Product
- SOMATOM X.cite
- Platforms
- Unknown
- Default status
Unknown
SOMATOM X.cite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM X.creed
- Vendor
- Siemens
- Product
- SOMATOM X.creed
- Platforms
- Unknown
- Default status
Unknown
SOMATOM X.creed · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.All
- Vendor
- Siemens
- Product
- SOMATOM go.All
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.All · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.Now
- Vendor
- Siemens
- Product
- SOMATOM go.Now
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.Now · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.Open Pro
- Vendor
- Siemens
- Product
- SOMATOM go.Open Pro
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.Open Pro · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.Sim
- Vendor
- Siemens
- Product
- SOMATOM go.Sim
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.Sim · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.Top
- Vendor
- Siemens
- Product
- SOMATOM go.Top
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.Top · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SOMATOM go.Up
- Vendor
- Siemens
- Product
- SOMATOM go.Up
- Platforms
- Unknown
- Default status
Unknown
SOMATOM go.Up · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VA30 SP5 or VA40 SP2 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
Symbia E/S
- Vendor
- Siemens
- Product
- Symbia E/S
- Platforms
- Unknown
- Default status
Unknown
Symbia E/S · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VB22 versions < VB22A-UD03 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
Symbia Evo
- Vendor
- Siemens
- Product
- Symbia Evo
- Platforms
- Unknown
- Default status
Unknown
Symbia Evo · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VB22 versions < VB22A-UD03 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
Symbia Intevo
- Vendor
- Siemens
- Product
- Symbia Intevo
- Platforms
- Unknown
- Default status
Unknown
Symbia Intevo · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VB22 versions < VB22A-UD03 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
Symbia T
- Vendor
- Siemens
- Product
- Symbia T
- Platforms
- Unknown
- Default status
Unknown
Symbia T · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VB22 versions < VB22A-UD03 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
Symbia.net
- Vendor
- Siemens
- Product
- Symbia.net
- Platforms
- Unknown
- Default status
Unknown
Symbia.net · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All VB22 versions < VB22A-UD03 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB10
- Vendor
- Siemens
- Product
- syngo.via VB10
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB10 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB20
- Vendor
- Siemens
- Product
- syngo.via VB20
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB20 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB30
- Vendor
- Siemens
- Product
- syngo.via VB30
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB30 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB40
- Vendor
- Siemens
- Product
- syngo.via VB40
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB40 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VB40B HF06 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB50
- Vendor
- Siemens
- Product
- syngo.via VB50
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB50 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
syngo.via VB60
- Vendor
- Siemens
- Product
- syngo.via VB60
- Platforms
- Unknown
- Default status
Unknown
syngo.via VB60 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions < VB60B HF02 | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|