Buffer overflow in Siemens Cerberus Pro En Engineering Tool
CVE-2024-22039
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow. This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
Vulnerability class: Buffer Overflow
EPSS: 0.008 (53.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Siemens Cerberus Pro En Engineering Tool — versions 0
- Siemens Cerberus_pro_en_engineering_tool
- Siemens Cerberus_pro_en_fire_panel_fc72x
- Siemens Cerberus Pro En Fire Panel Fc72x Ip6 — versions 0
- Siemens Cerberus Pro En Fire Panel Fc72x Ip7 — versions 0
- Siemens Cerberus_pro_en_x200_cloud_distribution
- Siemens Cerberus Pro En X200 Cloud Distribution Ip7 — versions 0
- Siemens Cerberus Pro En X200 Cloud Distribution Ip8 — versions 0
- Siemens Cerberus_pro_en_x300_cloud_distribution
- Siemens Cerberus Pro En X300 Cloud Distribution Ip7 — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (Patch, Vendor Advisory)
- productcert@siemens.com
Frequently asked questions
- What is CVE-2024-22039?
- CVE-2024-22039 is a critical-severity vulnerability in Siemens Cerberus Pro En Engineering Tool, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 10.0/10. Published 2024-03-12.
- How severe is CVE-2024-22039?
- Critical severity. CVSS v3 base score is 10.0 out of 10.
- Is CVE-2024-22039 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.