Deserialization in Siemens Biograph Horizon Pet/ct Systems
CVE-2022-29875
A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A), MAMMOMAT Revelation (All VC20 versions < VC20D), NAEOTOM Alpha (All VA40 versions < VA40 SP2), SOMATOM X.cite (All versions < VA30 SP5 or VA40 SP2), SOMATOM X.creed (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.All (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Now (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Open Pro (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Sim (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Top (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Up (All versions < VA30 SP5 or VA40 SP2), Symbia E/S (All VB22 versions < VB22A-UD03), Symbia Evo (All VB22 versions < VB22A-UD03), Symbia Intevo (All VB22 versions < VB22A-UD03), Symbia T (All VB22 versions < VB22A-UD03), Symbia.net (All VB22 versions < VB22A-UD03), syngo.via VB10 (All versions), syngo.via VB20 (All versions), syngo.via VB30 (All versions), syngo.via VB40 (All versions < VB40B HF06), syngo.via VB50 (All versions), syngo.via VB60 (All versions < VB60B HF02). The application deserialises untrusted data without sufficient validations that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system if ports 32912/tcp or 32914/tcp are reachable.
Vulnerability class: Insecure Deserialization
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.018 (77.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: +0.000
Affected products
- Siemens Biograph Horizon Pet/ct Systems — versions All VJ30 versions < VJ30C-UD01
- Siemens Biograph Horizon Pet\/ct Systems
- Siemens Biograph Horizon Pet\/ct Systems Firmware
- Siemens Magnetom Family — versions NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A
- Siemens Magnetom Numaris X
- Siemens Magnetom Numaris X Firmware — versions va10b, va12m, va12s
- Siemens Mammomat Revelation — versions All VC20 versions < VC20D
- Siemens Mammomat Revelation
- Siemens Mammomat Revelation Firmware
- Siemens Naeotom Alpha — versions All VA40 versions < VA40 SP2
Weakness classification (CWE)
References
- www.siemens-healthineers.com/support-documentation/cybersecurity/shsa-455016 (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-29875?
- CVE-2022-29875 is a critical-severity vulnerability in Siemens Biograph Horizon Pet/ct Systems, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2022-06-01.
- How severe is CVE-2022-29875?
- Critical severity. CVSS v3 base score is 9.8 out of 10.