Record status Published
Identifier year (not publication year) 2022
Source publication Oct 11, 2022
Source updated Aug 3, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). A Cross-Site Request Forgery exists in the “Import Files“ functionality of the “Operation” web application due to the missing validation of anti-CSRF tokens or other origin checks. A remote unauthenticated attacker can upload and enable permanent arbitrary JavaScript code into the device just by convincing a victim to visit a specifically crafted webpage while logged-in to the device web application.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Desigo PXM30-1
Vendor Siemens
Product Desigo PXM30-1
Platforms Unknown
Default status Unknown
Desigo PXM30-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM30.E
Vendor Siemens
Product Desigo PXM30.E
Platforms Unknown
Default status Unknown
Desigo PXM30.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM40-1
Vendor Siemens
Product Desigo PXM40-1
Platforms Unknown
Default status Unknown
Desigo PXM40-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM40.E
Vendor Siemens
Product Desigo PXM40.E
Platforms Unknown
Default status Unknown
Desigo PXM40.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM50-1
Vendor Siemens
Product Desigo PXM50-1
Platforms Unknown
Default status Unknown
Desigo PXM50-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
Desigo PXM50.E
Vendor Siemens
Product Desigo PXM50.E
Platforms Unknown
Default status Unknown
Desigo PXM50.E · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
PXG3.W100-1
Vendor Siemens
Product PXG3.W100-1
Platforms Unknown
Default status Unknown
PXG3.W100-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-37 affectedUnavailable Unavailable Unavailable None listed
PXG3.W100-2
Vendor Siemens
Product PXG3.W100-2
Platforms Unknown
Default status Unknown
PXG3.W100-2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed
PXG3.W200-1
Vendor Siemens
Product PXG3.W200-1
Platforms Unknown
Default status Unknown
PXG3.W200-1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-37 affectedUnavailable Unavailable Unavailable None listed
PXG3.W200-2
Vendor Siemens
Product PXG3.W200-2
Platforms Unknown
Default status Unknown
PXG3.W200-2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
All versions < V02.20.126.11-41 affectedUnavailable Unavailable Unavailable None listed