TI-2023-29272 Aliases CVE-2023-52952 GHSA-6wwp-wcg5-rj5m

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All…

LOW 39CWE-424Published 2024-10-08 · Updated 2024-10-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro (J31032-K2017-H260) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro+ (J31032-K2017-H436) (All versions >= V11.5.1 < V11.6.2). The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to escape the restricted environment and gain access to the underlying operating system.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00171 6th percentileScored 2026-11-07

Fix Fixed HiMed Cockpit 12 pro (Siemens): V11.6.2HiMed Cockpit 14 pro+ (Siemens): V11.6.2+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Siemens	HiMed Cockpit 12 pro	V11.5.1 to before V11.6.2	V11.6.2	Patch available	CNA
Siemens	HiMed Cockpit 14 pro+	V11.5.1 to before V11.6.2	V11.6.2	Patch available	CNA
Siemens	HiMed Cockpit 18 pro	V11.5.1 to before V11.6.2	V11.6.2	Patch available	CNA
Siemens	HiMed Cockpit 18 pro+	V11.5.1 to before V11.6.2	V11.6.2	Patch available	CNA

HiMed Cockpit 12 pro VendorSiemens Affected V11.5.1 to before V11.6.2 Fixed in V11.6.2 Patch available CNA
HiMed Cockpit 14 pro+ VendorSiemens Affected V11.5.1 to before V11.6.2 Fixed in V11.6.2 Patch available CNA
HiMed Cockpit 18 pro VendorSiemens Affected V11.5.1 to before V11.6.2 Fixed in V11.6.2 Patch available CNA
HiMed Cockpit 18 pro+ VendorSiemens Affected V11.5.1 to before V11.6.2 Fixed in V11.6.2 Patch available CNA

Remediation

Fix · CNA HiMed Cockpit 12 pro (Siemens) Fixed in V11.6.2
Fix · CNA HiMed Cockpit 14 pro+ (Siemens) Fixed in V11.6.2
Fix · CNA HiMed Cockpit 18 pro (Siemens) Fixed in V11.6.2
Fix · CNA HiMed Cockpit 18 pro+ (Siemens) Fixed in V11.6.2

Timeline

2026-10-02 Threatist record created from CVE-2023-52952
2026-10-03 Alias added: GHSA-6wwp-wcg5-rj5m

References

Other 1

https://cert-portal.siemens.com/productcert/html/ssa-540493.html

TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0

See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences