Buffer overflow in Siemens Cerberus Pro En Engineering Tool
CVE-2024-22039
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X20…
Vulnerability class: Buffer Overflow
EPSS: 0.008 (52.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Siemens Cerberus Pro En Engineering Tool — versions 0
- Siemens Cerberus_pro_en_engineering_tool
- Siemens Cerberus_pro_en_fire_panel_fc72x
- Siemens Cerberus Pro En Fire Panel Fc72x Ip6 — versions 0
- Siemens Cerberus Pro En Fire Panel Fc72x Ip7 — versions 0
- Siemens Cerberus_pro_en_x200_cloud_distribution
- Siemens Cerberus Pro En X200 Cloud Distribution Ip7 — versions 0
- Siemens Cerberus Pro En X200 Cloud Distribution Ip8 — versions 0
- Siemens Cerberus_pro_en_x300_cloud_distribution
- Siemens Cerberus Pro En X300 Cloud Distribution Ip7 — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- productcert@siemens.com (Patch, Vendor Advisory)
- productcert@siemens.com
Frequently asked questions
- What is CVE-2024-22039?
- CVE-2024-22039 is a critical-severity vulnerability in Siemens Cerberus Pro En Engineering Tool, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 10.0/10. Published 2024-03-12.
- How severe is CVE-2024-22039?
- Critical severity. CVSS v3 base score is 10.0 out of 10.
- Is CVE-2024-22039 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.