Record status Published
Identifier year (not publication year) 2022
Source publication Oct 11, 2022
Source updated Aug 3, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). Improper Neutralization of Input During Web Page Generation exists in the “Import Files“ functionality of the “Operation” web application, due to the missing validation of the titles of files included in the input package. By uploading a specifically crafted graphics package, a remote low-privileged attacker can execute arbitrary JavaScript code.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Desigo PXM30-1
Vendor Siemens
Product Desigo PXM30-1
Platforms Unknown
Default status Unknown
Desigo PXM30-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM30.E
Vendor Siemens
Product Desigo PXM30.E
Platforms Unknown
Default status Unknown
Desigo PXM30.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM40-1
Vendor Siemens
Product Desigo PXM40-1
Platforms Unknown
Default status Unknown
Desigo PXM40-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM40.E
Vendor Siemens
Product Desigo PXM40.E
Platforms Unknown
Default status Unknown
Desigo PXM40.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM50-1
Vendor Siemens
Product Desigo PXM50-1
Platforms Unknown
Default status Unknown
Desigo PXM50-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM50.E
Vendor Siemens
Product Desigo PXM50.E
Platforms Unknown
Default status Unknown
Desigo PXM50.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
PXG3.W100-1
Vendor Siemens
Product PXG3.W100-1
Platforms Unknown
Default status Unknown
PXG3.W100-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-37 affectedUnavailable Unavailable Unavailable None listed
PXG3.W100-2
Vendor Siemens
Product PXG3.W100-2
Platforms Unknown
Default status Unknown
PXG3.W100-2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
PXG3.W200-1
Vendor Siemens
Product PXG3.W200-1
Platforms Unknown
Default status Unknown
PXG3.W200-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-37 affectedUnavailable Unavailable Unavailable None listed
PXG3.W200-2
Vendor Siemens
Product PXG3.W200-2
Platforms Unknown
Default status Unknown
PXG3.W200-2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed