Deserialization of untrusted data in Siemens Biograph Horizon PET/CT Systems
Priority MEDIUM 46CWE-502Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-502.
Summary
A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A), MAMMOMAT Revelation (All VC20 versions < VC20D), NAEOTOM Alpha (All VA40 versions < VA40 SP2), SOMATOM X.cite (All versions < VA30 SP5 or VA40 SP2), SOMATOM X.creed (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.All (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Now (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Open Pro (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Sim (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Top (All versions < VA30 SP5 or VA40 SP2), SOMATOM go.Up (All versions < VA30 SP5 or VA40 SP2), Symbia E/S (All VB22 versions < VB22A-UD03), Symbia Evo (All VB22 versions < VB22A-UD03), Symbia Intevo (All VB22 versions < VB22A-UD03), Symbia T (All VB22 versions < VB22A-UD03), Symbia.net (All VB22 versions < VB22A-UD03), syngo.via VB10 (All versions), syngo.via VB20 (All versions), syngo.via VB30 (All versions), syngo.via VB40 (All versions < VB40B HF06), syngo.via VB50 (All versions), syngo.via VB60 (All versions < VB60B HF02). The application deserialises untrusted data without sufficient validations that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system if ports 32912/tcp or 32914/tcp are reachable.
Why it matters now
EPSS 0.0187 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | Biograph Horizon PET/CT Systems | All VJ30 versions < VJ30C-UD01 | — | No fix listed | CNA |
| Siemens | MAGNETOM Family | NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A | — | No fix listed | CNA |
| Siemens | MAMMOMAT Revelation | All VC20 versions < VC20D | — | No fix listed | CNA |
| Siemens | NAEOTOM Alpha | All VA40 versions < VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM X.cite | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM X.creed | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.All | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.Now | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.Open Pro | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.Sim | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.Top | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | SOMATOM go.Up | All versions < VA30 SP5 or VA40 SP2 | — | No fix listed | CNA |
| Siemens | Symbia E/S | All VB22 versions < VB22A-UD03 | — | No fix listed | CNA |
| Siemens | Symbia Evo | All VB22 versions < VB22A-UD03 | — | No fix listed | CNA |
| Siemens | Symbia Intevo | All VB22 versions < VB22A-UD03 | — | No fix listed | CNA |
| Siemens | Symbia T | All VB22 versions < VB22A-UD03 | — | No fix listed | CNA |
| Siemens | Symbia.net | All VB22 versions < VB22A-UD03 | — | No fix listed | CNA |
| Siemens | syngo.via VB10 | All versions | — | No fix listed | CNA |
| Siemens | syngo.via VB20 | All versions | — | No fix listed | CNA |
| Siemens | syngo.via VB30 | All versions | — | No fix listed | CNA |
| Siemens | syngo.via VB40 | All versions < VB40B HF06 | — | No fix listed | CNA |
| Siemens | syngo.via VB50 | All versions | — | No fix listed | CNA |
| Siemens | syngo.via VB60 | All versions < VB60B HF02 | — | No fix listed | CNA |
- Biograph Horizon PET/CT Systems VendorSiemens Affected All VJ30 versions < VJ30C-UD01 Fixed in — No fix listed CNA
- MAGNETOM Family VendorSiemens Affected NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A Fixed in — No fix listed CNA
- MAMMOMAT Revelation VendorSiemens Affected All VC20 versions < VC20D Fixed in — No fix listed CNA
- NAEOTOM Alpha VendorSiemens Affected All VA40 versions < VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM X.cite VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM X.creed VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.All VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.Now VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.Open Pro VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.Sim VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.Top VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- SOMATOM go.Up VendorSiemens Affected All versions < VA30 SP5 or VA40 SP2 Fixed in — No fix listed CNA
- Symbia E/S VendorSiemens Affected All VB22 versions < VB22A-UD03 Fixed in — No fix listed CNA
- Symbia Evo VendorSiemens Affected All VB22 versions < VB22A-UD03 Fixed in — No fix listed CNA
- Symbia Intevo VendorSiemens Affected All VB22 versions < VB22A-UD03 Fixed in — No fix listed CNA
- Symbia T VendorSiemens Affected All VB22 versions < VB22A-UD03 Fixed in — No fix listed CNA
- Symbia.net VendorSiemens Affected All VB22 versions < VB22A-UD03 Fixed in — No fix listed CNA
- syngo.via VB10 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- syngo.via VB20 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- syngo.via VB30 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- syngo.via VB40 VendorSiemens Affected All versions < VB40B HF06 Fixed in — No fix listed CNA
- syngo.via VB50 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- syngo.via VB60 VendorSiemens Affected All versions < VB60B HF02 Fixed in — No fix listed CNA
CPE configurations NVD · 59
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:biograph_horizon_pet\/ct_systems_firmware:*:*:*:*:*:*:*:* | vj30 to before vj30c-ud01 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:biograph_horizon_pet\/ct_systems:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va10b:*:*:*:*:*:*:* | va10b | Vulnerable | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va12m:*:*:*:*:*:*:* | va12m | Vulnerable | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va12s:*:*:*:*:*:*:* | va12s | Vulnerable | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va20a:*:*:*:*:*:*:* | va20a | Vulnerable | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va30a:*:*:*:*:*:*:* | va30a | Vulnerable | Siemens |
| cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va31a:*:*:*:*:*:*:* | va31a | Vulnerable | Siemens |
| cpe:2.3:h:siemens:magnetom_numaris_x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:mammomat_revelation_firmware:*:*:*:*:*:*:*:* | vc20 to before vc20d | Vulnerable | Siemens |
- cpe:2.3:o:siemens:biograph_horizon_pet\/ct_systems_firmware:*:*:*:*:*:*:*:* Versions vj30 to before vj30c-ud01 Vulnerable ·Siemens
- cpe:2.3:h:siemens:biograph_horizon_pet\/ct_systems:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va10b:*:*:*:*:*:*:* Versions va10b Vulnerable ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va12m:*:*:*:*:*:*:* Versions va12m Vulnerable ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va12s:*:*:*:*:*:*:* Versions va12s Vulnerable ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va20a:*:*:*:*:*:*:* Versions va20a Vulnerable ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va30a:*:*:*:*:*:*:* Versions va30a Vulnerable ·Siemens
- cpe:2.3:o:siemens:magnetom_numaris_x_firmware:va31a:*:*:*:*:*:*:* Versions va31a Vulnerable ·Siemens
- cpe:2.3:h:siemens:magnetom_numaris_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:mammomat_revelation_firmware:*:*:*:*:*:*:*:* Versions vc20 to before vc20d Vulnerable ·Siemens
Show 49 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:mammomat_revelation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:naeotom_alpha_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:naeotom_alpha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_x.cite_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_x.cite_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_x.cite_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_x.cite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_x.creed_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_x.creed_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_x.creed_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_x.creed:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_go.all_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.all_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.all_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_go.all:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_go.now_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.now_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.now_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_go.now:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_go.open_pro_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.open_pro_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.open_pro_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_go.open_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_go.sim_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.sim_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.sim_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_go.sim:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:somatom_go.up_firmware:*:*:*:*:*:*:*:* | before va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.up_firmware:va30:-:*:*:*:*:*:* | va30 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:somatom_go.up_firmware:va40:-:*:*:*:*:*:* | va40 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:somatom_go.up:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:symbia_e_firmware:*:*:*:*:*:*:*:* | vb22 to before vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:symbia_e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:symbia_s_firmware:*:*:*:*:*:*:*:* | vb22 to before vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:symbia_s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:symbia_evo_firmware:*:*:*:*:*:*:*:* | vb22 to before vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:symbia_evo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:symbia_intevo_firmware:*:*:*:*:*:*:*:* | vb22 to before vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:symbia_intevo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:symbia_t_firmware:*:*:*:*:*:*:*:* | vb22 to before vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:symbia_t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:symbia.net:*:*:*:*:*:*:*:* | vb22 – vb22a-ud03 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:*:*:*:*:*:*:*:* | vb40 to before vb40b; vb60 to before vb60b | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb10:*:*:*:*:*:*:* | vb10 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb20:*:*:*:*:*:*:* | vb20 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb30:*:*:*:*:*:*:* | vb30 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb40b:-:*:*:*:*:*:* | vb40b | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb50:*:*:*:*:*:*:* | vb50 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:syngo.via:vb60b:-:*:*:*:*:*:* | vb60b | Vulnerable | Siemens |
- cpe:2.3:h:siemens:mammomat_revelation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:naeotom_alpha_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:naeotom_alpha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_x.cite_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_x.cite_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_x.cite_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_x.cite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_x.creed_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_x.creed_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_x.creed_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_x.creed:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_go.all_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.all_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.all_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_go.all:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_go.now_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.now_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.now_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_go.now:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_go.open_pro_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.open_pro_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.open_pro_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_go.open_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_go.sim_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.sim_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.sim_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_go.sim:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:somatom_go.up_firmware:*:*:*:*:*:*:*:* Versions before va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.up_firmware:va30:-:*:*:*:*:*:* Versions va30 Vulnerable ·Siemens
- cpe:2.3:o:siemens:somatom_go.up_firmware:va40:-:*:*:*:*:*:* Versions va40 Vulnerable ·Siemens
- cpe:2.3:h:siemens:somatom_go.up:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:symbia_e_firmware:*:*:*:*:*:*:*:* Versions vb22 to before vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:symbia_e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:symbia_s_firmware:*:*:*:*:*:*:*:* Versions vb22 to before vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:symbia_s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:symbia_evo_firmware:*:*:*:*:*:*:*:* Versions vb22 to before vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:symbia_evo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:symbia_intevo_firmware:*:*:*:*:*:*:*:* Versions vb22 to before vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:symbia_intevo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:symbia_t_firmware:*:*:*:*:*:*:*:* Versions vb22 to before vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:h:siemens:symbia_t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:symbia.net:*:*:*:*:*:*:*:* Versions vb22 – vb22a-ud03 Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:*:*:*:*:*:*:*:* Versions vb40 to before vb40b; vb60 to before vb60b Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb10:*:*:*:*:*:*:* Versions vb10 Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb20:*:*:*:*:*:*:* Versions vb20 Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb30:*:*:*:*:*:*:* Versions vb30 Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb40b:-:*:*:*:*:*:* Versions vb40b Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb50:*:*:*:*:*:*:* Versions vb50 Vulnerable ·Siemens
- cpe:2.3:a:siemens:syngo.via:vb60b:-:*:*:*:*:*:* Versions vb60b Vulnerable ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-29875
- 2026-10-03 Alias added: GHSA-qq72-778q-mwmx
References
Sources
- CVE-2022-29875 · CVE Program
- CVE-2022-29875 · NVD
- FIRST EPSS
- GHSA-qq72-778q-mwmx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences