TI-2022-07999 Aliases CVE-2022-24039 GHSA-5ffq-g4qh-w8q3

A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884)…

MEDIUM 43CWE-75Published 2022-05-10 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such that it is possible to inject arbitrary content (e.g., XML tags) into the generated file. An attacker with restricted privileges, by poisoning any of the content used to generate XLS reports, could be able to leverage the application to deliver malicious files against higher-privileged users and obtain Remote Code Execution (RCE) against the administrator’s workstation.

Why it matters now

EPSS 0.02033 81st percentileScored 2026-11-07

Fix Fixed Desigo PXC4 (Siemens): V02.20.142.10-10884Desigo PXC5 (Siemens): V02.20.142.10-10884

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Siemens	Desigo PXC4	before V02.20.142.10-10884	V02.20.142.10-10884	Patch available	CNA
Siemens	Desigo PXC5	before V02.20.142.10-10884	V02.20.142.10-10884	Patch available	CNA

Desigo PXC4 VendorSiemens Affected before V02.20.142.10-10884 Fixed in V02.20.142.10-10884 Patch available CNA
Desigo PXC5 VendorSiemens Affected before V02.20.142.10-10884 Fixed in V02.20.142.10-10884 Patch available CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:siemens:desigo_pxc5_firmware::::::::	before 02.20.142.10-10884	Vulnerable	Siemens
cpe:2.3:h:siemens:desigo_pxc5:-:::::::*	not specified by NVD	Running on	Siemens
cpe:2.3:o:siemens:desigo_pxc4_firmware::::::::	before 02.20.142.10-10884	Vulnerable	Siemens
cpe:2.3:h:siemens:desigo_pxc4:-:::::::*	not specified by NVD	Running on	Siemens

cpe:2.3:o:siemens:desigo_pxc5_firmware:*:*:*:*:*:*:*:* Versions before 02.20.142.10-10884 Vulnerable ·Siemens
cpe:2.3:h:siemens:desigo_pxc5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
cpe:2.3:o:siemens:desigo_pxc4_firmware:*:*:*:*:*:*:*:* Versions before 02.20.142.10-10884 Vulnerable ·Siemens
cpe:2.3:h:siemens:desigo_pxc4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

Fix · CNA Desigo PXC4 (Siemens) Fixed in V02.20.142.10-10884
Fix · CNA Desigo PXC5 (Siemens) Fixed in V02.20.142.10-10884

Timeline

2026-10-02 Threatist record created from CVE-2022-24039
2026-10-03 Alias added: GHSA-5ffq-g4qh-w8q3

References

Advisory 1

https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

TI-2022-08002 Insufficient session expiration in Siemens Desigo DXR2 CVSS 3.1CRITICAL 9.1
TI-2022-08004 Missing brute-force protection in Siemens Desigo DXR2 CVSS 3.1HIGH 7.5
TI-2021-18284 A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)… CVSS 3.1HIGH 7.5
TI-2022-08005 A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)… CVSS 3.1MEDIUM 6.5
TI-2022-08000 Uncontrolled resource consumption in Siemens Desigo DXR2 CVSS 3.1MEDIUM 6.5
TI-2022-08001 A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22)… CVSS 3.1MEDIUM 6.5

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences