Read the docs
TI-2024-14658 Aliases CVE-2024-22039GHSA-p429-8j49-f6x5

Buffer overflow in Siemens Cerberus PRO EN Engineering Tool

Priority MEDIUM 50CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow. This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00813 57th percentileScored 2026-11-07
Fix Fixed Cerberus PRO EN Engineering Tool (Siemens): IP8Cerberus PRO EN Fire Panel FC72x IP6 (Siemens): IP6 SR3+19 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensCerberus PRO EN Engineering Toolbefore IP8IP8Patch availableCNA
SiemensCerberus PRO EN Fire Panel FC72x IP6before IP6 SR3IP6 SR3Patch availableCNA
SiemensCerberus PRO EN Fire Panel FC72x IP7before IP7 SR5IP7 SR5Patch availableCNA
SiemensCerberus PRO EN X200 Cloud Distribution IP7before V3.0.6602V3.0.6602Patch availableCNA
SiemensCerberus PRO EN X200 Cloud Distribution IP8before V4.0.5016V4.0.5016Patch availableCNA
SiemensCerberus PRO EN X300 Cloud Distribution IP7before V3.2.6601V3.2.6601Patch availableCNA
SiemensCerberus PRO EN X300 Cloud Distribution IP8before V4.2.5015V4.2.5015Patch availableCNA
SiemensCerberus PRO UL Compact Panel FC922/924before MP4MP4Patch availableCNA
SiemensCerberus PRO UL Engineering Toolbefore MP4MP4Patch availableCNA
SiemensCerberus PRO UL X300 Cloud Distributionbefore V4.3.0001V4.3.0001Patch availableCNA
SiemensDesigo Fire Safety UL Compact Panel FC2025/2050before MP4MP4Patch availableCNA
SiemensDesigo Fire Safety UL Engineering Toolbefore MP4MP4Patch availableCNA
SiemensDesigo Fire Safety UL X300 Cloud Distributionbefore V4.3.0001V4.3.0001Patch availableCNA
SiemensSinteso FS20 EN Engineering Toolbefore MP8MP8Patch availableCNA
SiemensSinteso FS20 EN Fire Panel FC20 MP6before MP6 SR3MP6 SR3Patch availableCNA
SiemensSinteso FS20 EN Fire Panel FC20 MP7before MP7 SR5MP7 SR5Patch availableCNA
SiemensSinteso FS20 EN X200 Cloud Distribution MP7before V3.0.6602V3.0.6602Patch availableCNA
SiemensSinteso FS20 EN X200 Cloud Distribution MP8before V4.0.5016V4.0.5016Patch availableCNA
SiemensSinteso FS20 EN X300 Cloud Distribution MP7before V3.2.6601V3.2.6601Patch availableCNA
SiemensSinteso FS20 EN X300 Cloud Distribution MP8before V4.2.5015V4.2.5015Patch availableCNA
SiemensSinteso Mobilebefore V3.0.0V3.0.0Patch availableCNA
  • Cerberus PRO EN Engineering Tool VendorSiemens Affected before IP8 Fixed in IP8 Patch available CNA
  • Cerberus PRO EN Fire Panel FC72x IP6 VendorSiemens Affected before IP6 SR3 Fixed in IP6 SR3 Patch available CNA
  • Cerberus PRO EN Fire Panel FC72x IP7 VendorSiemens Affected before IP7 SR5 Fixed in IP7 SR5 Patch available CNA
  • Cerberus PRO EN X200 Cloud Distribution IP7 VendorSiemens Affected before V3.0.6602 Fixed in V3.0.6602 Patch available CNA
  • Cerberus PRO EN X200 Cloud Distribution IP8 VendorSiemens Affected before V4.0.5016 Fixed in V4.0.5016 Patch available CNA
  • Cerberus PRO EN X300 Cloud Distribution IP7 VendorSiemens Affected before V3.2.6601 Fixed in V3.2.6601 Patch available CNA
  • Cerberus PRO EN X300 Cloud Distribution IP8 VendorSiemens Affected before V4.2.5015 Fixed in V4.2.5015 Patch available CNA
  • Cerberus PRO UL Compact Panel FC922/924 VendorSiemens Affected before MP4 Fixed in MP4 Patch available CNA
  • Cerberus PRO UL Engineering Tool VendorSiemens Affected before MP4 Fixed in MP4 Patch available CNA
  • Cerberus PRO UL X300 Cloud Distribution VendorSiemens Affected before V4.3.0001 Fixed in V4.3.0001 Patch available CNA
  • Desigo Fire Safety UL Compact Panel FC2025/2050 VendorSiemens Affected before MP4 Fixed in MP4 Patch available CNA
  • Desigo Fire Safety UL Engineering Tool VendorSiemens Affected before MP4 Fixed in MP4 Patch available CNA
  • Desigo Fire Safety UL X300 Cloud Distribution VendorSiemens Affected before V4.3.0001 Fixed in V4.3.0001 Patch available CNA
  • Sinteso FS20 EN Engineering Tool VendorSiemens Affected before MP8 Fixed in MP8 Patch available CNA
  • Sinteso FS20 EN Fire Panel FC20 MP6 VendorSiemens Affected before MP6 SR3 Fixed in MP6 SR3 Patch available CNA
  • Sinteso FS20 EN Fire Panel FC20 MP7 VendorSiemens Affected before MP7 SR5 Fixed in MP7 SR5 Patch available CNA
  • Sinteso FS20 EN X200 Cloud Distribution MP7 VendorSiemens Affected before V3.0.6602 Fixed in V3.0.6602 Patch available CNA
  • Sinteso FS20 EN X200 Cloud Distribution MP8 VendorSiemens Affected before V4.0.5016 Fixed in V4.0.5016 Patch available CNA
  • Sinteso FS20 EN X300 Cloud Distribution MP7 VendorSiemens Affected before V3.2.6601 Fixed in V3.2.6601 Patch available CNA
  • Sinteso FS20 EN X300 Cloud Distribution MP8 VendorSiemens Affected before V4.2.5015 Fixed in V4.2.5015 Patch available CNA
  • Sinteso Mobile VendorSiemens Affected before V3.0.0 Fixed in V3.0.0 Patch available CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:siemens:cerberus_pro_en_engineering_tool:*:*:*:*:*:*:*:*before ip8VulnerableSiemens
cpe:2.3:a:siemens:cerberus_pro_en_fire_panel_fc72x:*:*:*:*:*:*:*:*before ip8VulnerableSiemens
cpe:2.3:a:siemens:cerberus_pro_en_x200_cloud_distribution:*:*:*:*:*:*:*:*before 4.0.5016VulnerableSiemens
cpe:2.3:a:siemens:cerberus_pro_en_x300_cloud_distribution:*:*:*:*:*:*:*:*before 4.2.5015VulnerableSiemens
cpe:2.3:a:siemens:sinteso_fs20_en_engineering_tool:*:*:*:*:*:*:*:*before mp8VulnerableSiemens
cpe:2.3:a:siemens:sinteso_fs20_en_fire_panel_fc20:*:*:*:*:*:*:*:*before mp8VulnerableSiemens
cpe:2.3:a:siemens:sinteso_fs20_en_x200_cloud_distribution:*:*:*:*:*:*:*:*before 4.0.5016VulnerableSiemens
cpe:2.3:a:siemens:sinteso_fs20_en_x300_cloud_distribution:*:*:*:*:*:*:*:*before 4.2.5015VulnerableSiemens
cpe:2.3:a:siemens:sinteso_mobile:*:*:*:*:*:*:*:*before 3.0.0VulnerableSiemens
  • cpe:2.3:a:siemens:cerberus_pro_en_engineering_tool:*:*:*:*:*:*:*:* Versions before ip8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:cerberus_pro_en_fire_panel_fc72x:*:*:*:*:*:*:*:* Versions before ip8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:cerberus_pro_en_x200_cloud_distribution:*:*:*:*:*:*:*:* Versions before 4.0.5016 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:cerberus_pro_en_x300_cloud_distribution:*:*:*:*:*:*:*:* Versions before 4.2.5015 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sinteso_fs20_en_engineering_tool:*:*:*:*:*:*:*:* Versions before mp8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sinteso_fs20_en_fire_panel_fc20:*:*:*:*:*:*:*:* Versions before mp8 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sinteso_fs20_en_x200_cloud_distribution:*:*:*:*:*:*:*:* Versions before 4.0.5016 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sinteso_fs20_en_x300_cloud_distribution:*:*:*:*:*:*:*:* Versions before 4.2.5015 Vulnerable ·Siemens
  • cpe:2.3:a:siemens:sinteso_mobile:*:*:*:*:*:*:*:* Versions before 3.0.0 Vulnerable ·Siemens

Remediation

  • Fix · CNA Cerberus PRO EN Engineering Tool (Siemens) Fixed in IP8
  • Fix · CNA Cerberus PRO EN Fire Panel FC72x IP6 (Siemens) Fixed in IP6 SR3
  • Fix · CNA Cerberus PRO EN Fire Panel FC72x IP7 (Siemens) Fixed in IP7 SR5
  • Fix · CNA Cerberus PRO EN X200 Cloud Distribution IP7 (Siemens) Fixed in V3.0.6602
  • Fix · CNA Cerberus PRO EN X200 Cloud Distribution IP8 (Siemens) Fixed in V4.0.5016
  • Fix · CNA Cerberus PRO EN X300 Cloud Distribution IP7 (Siemens) Fixed in V3.2.6601
  • Fix · CNA Cerberus PRO EN X300 Cloud Distribution IP8 (Siemens) Fixed in V4.2.5015
  • Fix · CNA Cerberus PRO UL Compact Panel FC922/924 (Siemens) Fixed in MP4
  • Fix · CNA Cerberus PRO UL Engineering Tool (Siemens) Fixed in MP4
  • Fix · CNA Cerberus PRO UL X300 Cloud Distribution (Siemens) Fixed in V4.3.0001
  • Fix · CNA Desigo Fire Safety UL Compact Panel FC2025/2050 (Siemens) Fixed in MP4
  • Fix · CNA Desigo Fire Safety UL Engineering Tool (Siemens) Fixed in MP4
  • Fix · CNA Desigo Fire Safety UL X300 Cloud Distribution (Siemens) Fixed in V4.3.0001
  • Fix · CNA Sinteso FS20 EN Engineering Tool (Siemens) Fixed in MP8
  • Fix · CNA Sinteso FS20 EN Fire Panel FC20 MP6 (Siemens) Fixed in MP6 SR3
  • Fix · CNA Sinteso FS20 EN Fire Panel FC20 MP7 (Siemens) Fixed in MP7 SR5
  • Fix · CNA Sinteso FS20 EN X200 Cloud Distribution MP7 (Siemens) Fixed in V3.0.6602
  • Fix · CNA Sinteso FS20 EN X200 Cloud Distribution MP8 (Siemens) Fixed in V4.0.5016
  • Fix · CNA Sinteso FS20 EN X300 Cloud Distribution MP7 (Siemens) Fixed in V3.2.6601
  • Fix · CNA Sinteso FS20 EN X300 Cloud Distribution MP8 (Siemens) Fixed in V4.2.5015
  • Fix · CNA Sinteso Mobile (Siemens) Fixed in V3.0.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens Cerberus PRO UL Compact Panel FC922/924, Cerberus PRO UL Engineering Tool and 4 more products MP4, V4.3.0001

    3 records Highest priority Priority MEDIUM 3 MEDIUM

    Other records, highest priority first

    • TI-2024-14659 Out-of-bounds read in Siemens Cerberus PRO EN Engineering ToolPriority MEDIUM 42
    • TI-2024-14660 Memory corruption in Siemens Cerberus PRO EN Engineering ToolPriority MEDIUM 41
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-22039
  2. 2026-10-03 Alias added: GHSA-p429-8j49-f6x5

References

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences