Missing authentication in Siemens Desigo PXC00-E.D V4.10
Priority MEDIUM 48CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass, Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306 and CWE-434.
Summary
A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All versions < V5.0.171), Desigo PXC00-E.D V5.10 (All versions < V5.10.69), Desigo PXC00-E.D V6.00 (All versions < V6.0.204), Desigo PXC00/64/128-U V4.10 (All versions < V4.10.111 only with web module), Desigo PXC00/64/128-U V5.00 (All versions < V5.0.171 only with web module), Desigo PXC00/64/128-U V5.10 (All versions < V5.10.69 only with web module), Desigo PXC00/64/128-U V6.00 (All versions < V6.0.204 only with web module), Desigo PXC001-E.D V4.10 (All versions < V4.10.111), Desigo PXC001-E.D V5.00 (All versions < V5.0.171), Desigo PXC001-E.D V5.10 (All versions < V5.10.69), Desigo PXC001-E.D V6.00 (All versions < V6.0.204), Desigo PXC100-E.D V4.10 (All versions < V4.10.111), Desigo PXC100-E.D V5.00 (All versions < V5.0.171), Desigo PXC100-E.D V5.10 (All versions < V5.10.69), Desigo PXC100-E.D V6.00 (All versions < V6.0.204), Desigo PXC12-E.D V4.10 (All versions < V4.10.111), Desigo PXC12-E.D V5.00 (All versions < V5.0.171), Desigo PXC12-E.D V5.10 (All versions < V5.10.69), Desigo PXC12-E.D V6.00 (All versions < V6.0.204), Desigo PXC200-E.D V4.10 (All versions < V4.10.111), Desigo PXC200-E.D V5.00 (All versions < V5.0.171), Desigo PXC200-E.D V5.10 (All versions < V5.10.69), Desigo PXC200-E.D V6.00 (All versions < V6.0.204), Desigo PXC22-E.D V4.10 (All versions < V4.10.111), Desigo PXC22-E.D V5.00 (All versions < V5.0.171), Desigo PXC22-E.D V5.10 (All versions < V5.10.69), Desigo PXC22-E.D V6.00 (All versions < V6.0.204), Desigo PXC22.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC22.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC22.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC22.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC36.1-E.D V4.10 (All versions < V4.10.111), Desigo PXC36.1-E.D V5.00 (All versions < V5.0.171), Desigo PXC36.1-E.D V5.10 (All versions < V5.10.69), Desigo PXC36.1-E.D V6.00 (All versions < V6.0.204), Desigo PXC50-E.D V4.10 (All versions < V4.10.111), Desigo PXC50-E.D V5.00 (All versions < V5.0.171), Desigo PXC50-E.D V5.10 (All versions < V5.10.69), Desigo PXC50-E.D V6.00 (All versions < V6.0.204), Desigo PXM20-E V4.10 (All versions < V4.10.111), Desigo PXM20-E V5.00 (All versions < V5.0.171), Desigo PXM20-E V5.10 (All versions < V5.10.69), Desigo PXM20-E V6.00 (All versions < V6.0.204). A remote attacker with network access to the device could potentially upload a new firmware image to the devices without prior authentication.
Why it matters now
EPSS 0.0333 88th percentileScored 2026-11-07
Fix Fixed Desigo PXC00-E.D V4.10 (Siemens): V4.10.111Desigo PXC00-E.D V5.00 (Siemens): V5.0.171+38 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Desigo PXC00-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC00-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC00-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC00-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC00/64/128-U V4.10 | All versions < V4.10.111 only with web module | — | No fix listed | CNA |
| Siemens | Desigo PXC00/64/128-U V5.00 | All versions < V5.0.171 only with web module | — | No fix listed | CNA |
| Siemens | Desigo PXC00/64/128-U V5.10 | All versions < V5.10.69 only with web module | — | No fix listed | CNA |
| Siemens | Desigo PXC00/64/128-U V6.00 | All versions < V6.0.204 only with web module | — | No fix listed | CNA |
| Siemens | Desigo PXC001-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC001-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC001-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC001-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC100-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC12-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC200-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC200-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC200-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC200-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC22-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC22.1-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC36.1-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXC50-E.D V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
| Siemens | Desigo PXM20-E V4.10 | before V4.10.111 | V4.10.111 | Patch available | CNA |
| Siemens | Desigo PXM20-E V5.00 | before V5.0.171 | V5.0.171 | Patch available | CNA |
| Siemens | Desigo PXM20-E V5.10 | before V5.10.69 | V5.10.69 | Patch available | CNA |
| Siemens | Desigo PXM20-E V6.00 | before V6.0.204 | V6.0.204 | Patch available | CNA |
- Desigo PXC00-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC00-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC00-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC00-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC00/64/128-U V4.10 VendorSiemens Affected All versions < V4.10.111 only with web module Fixed in — No fix listed CNA
- Desigo PXC00/64/128-U V5.00 VendorSiemens Affected All versions < V5.0.171 only with web module Fixed in — No fix listed CNA
- Desigo PXC00/64/128-U V5.10 VendorSiemens Affected All versions < V5.10.69 only with web module Fixed in — No fix listed CNA
- Desigo PXC00/64/128-U V6.00 VendorSiemens Affected All versions < V6.0.204 only with web module Fixed in — No fix listed CNA
- Desigo PXC001-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC001-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC001-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC001-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC100-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC100-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC100-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC100-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC12-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC12-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC12-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC12-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC200-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC200-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC200-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC200-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC22-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC22-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC22-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC22-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC22.1-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC22.1-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC22.1-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC22.1-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC36.1-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC36.1-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC36.1-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC36.1-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXC50-E.D V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXC50-E.D V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXC50-E.D V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXC50-E.D V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
- Desigo PXM20-E V4.10 VendorSiemens Affected before V4.10.111 Fixed in V4.10.111 Patch available CNA
- Desigo PXM20-E V5.00 VendorSiemens Affected before V5.0.171 Fixed in V5.0.171 Patch available CNA
- Desigo PXM20-E V5.10 VendorSiemens Affected before V5.10.69 Fixed in V5.10.69 Patch available CNA
- Desigo PXM20-E V6.00 VendorSiemens Affected before V6.0.204 Fixed in V6.0.204 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:pxc12\/22\/36-e.d_firmware:*:*:*:*:*:*:*:* | before 6.00.204 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:pxc12\/22\/36-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:pxc00\/50\/100\/200-e.d_firmware:*:*:*:*:*:*:*:* | before 6.00.204 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:pxc00\/50\/100\/200-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:pxc00\/64\/128-u_firmware:*:*:*:*:*:*:*:* | before 6.00.204 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:pxc00\/64\/128-u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:pxc001-e.d_firmware:*:*:*:*:*:*:*:* | before 6.00.204 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:pxc001-e.d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:pxm20-e_firmware:*:*:*:*:*:*:*:* | before 6.00.204 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:pxm20-e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:pxc12\/22\/36-e.d_firmware:*:*:*:*:*:*:*:* Versions before 6.00.204 Vulnerable ·Siemens
- cpe:2.3:h:siemens:pxc12\/22\/36-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:pxc00\/50\/100\/200-e.d_firmware:*:*:*:*:*:*:*:* Versions before 6.00.204 Vulnerable ·Siemens
- cpe:2.3:h:siemens:pxc00\/50\/100\/200-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:pxc00\/64\/128-u_firmware:*:*:*:*:*:*:*:* Versions before 6.00.204 Vulnerable ·Siemens
- cpe:2.3:h:siemens:pxc00\/64\/128-u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:pxc001-e.d_firmware:*:*:*:*:*:*:*:* Versions before 6.00.204 Vulnerable ·Siemens
- cpe:2.3:h:siemens:pxc001-e.d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:pxm20-e_firmware:*:*:*:*:*:*:*:* Versions before 6.00.204 Vulnerable ·Siemens
- cpe:2.3:h:siemens:pxm20-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA Desigo PXC00-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC00-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC00-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC00-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC001-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC001-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC001-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC001-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC100-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC100-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC100-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC100-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC12-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC12-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC12-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC12-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC200-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC200-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC200-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC200-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC22-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC22-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC22-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC22-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC22.1-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC22.1-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC22.1-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC22.1-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC36.1-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC36.1-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC36.1-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC36.1-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXC50-E.D V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXC50-E.D V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXC50-E.D V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXC50-E.D V6.00 (Siemens) Fixed in V6.0.204
- Fix · CNA Desigo PXM20-E V4.10 (Siemens) Fixed in V4.10.111
- Fix · CNA Desigo PXM20-E V5.00 (Siemens) Fixed in V5.0.171
- Fix · CNA Desigo PXM20-E V5.10 (Siemens) Fixed in V5.10.69
- Fix · CNA Desigo PXM20-E V6.00 (Siemens) Fixed in V6.0.204
Timeline
- 2026-10-02 Threatist record created from CVE-2018-4834
- 2026-10-03 Alias added: GHSA-6764-3gh7-vvcp
References
Sources
- CVE-2018-4834 · CVE Program
- CVE-2018-4834 · NVD
- FIRST EPSS
- GHSA-6764-3gh7-vvcp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences