{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2024-22039", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-22039", "idYear": 2024, "status": "PUBLISHED", "publishedAt": "2024-03-12T10:21:53.634Z", "updatedAt": "2025-12-16T18:13:22.497Z", "importedAt": "2026-10-24T01:57:07.518Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": null, "summary": "A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow.\r\nThis could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.", "affected": [ { "vendor": "Siemens", "product": "Cerberus PRO EN Engineering Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "IP8" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN Fire Panel FC72x IP6", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "IP6 SR3" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN Fire Panel FC72x IP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "IP7 SR5" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN X200 Cloud Distribution IP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.0.6602" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN X200 Cloud Distribution IP8", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.0.5016" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN X300 Cloud Distribution IP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.2.6601" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO EN X300 Cloud Distribution IP8", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.2.5015" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO UL Compact Panel FC922/924", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP4" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO UL Engineering Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP4" } ] }, { "vendor": "Siemens", "product": "Cerberus PRO UL X300 Cloud Distribution", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.3.0001" } ] }, { "vendor": "Siemens", "product": "Desigo Fire Safety UL Compact Panel FC2025/2050", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP4" } ] }, { "vendor": "Siemens", "product": "Desigo Fire Safety UL Engineering Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP4" } ] }, { "vendor": "Siemens", "product": "Desigo Fire Safety UL X300 Cloud Distribution", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.3.0001" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN Engineering Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP8" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN Fire Panel FC20 MP6", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP6 SR3" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN Fire Panel FC20 MP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "MP7 SR5" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN X200 Cloud Distribution MP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.0.6602" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN X200 Cloud Distribution MP8", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.0.5016" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN X300 Cloud Distribution MP7", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.2.6601" } ] }, { "vendor": "Siemens", "product": "Sinteso FS20 EN X300 Cloud Distribution MP8", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V4.2.5015" } ] }, { "vendor": "Siemens", "product": "Sinteso Mobile", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.0.0" } ] } ] } } }