A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions),
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in IP8 SR4, V4.3.5618, V4.3.5617, MP4, V4.3.0001, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems insufficiently validates HMAC values which might result in a buffer overread. This could allow an unauthenticated remote attacker to crash the network service.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Siemens Cerberus PRO EN Engineering Tool
All versions
- Siemens Cerberus PRO EN Fire Panel FC72x IP6
All versions
- Siemens Cerberus PRO EN Fire Panel FC72x IP7
All versions
- Siemens Cerberus PRO EN Fire Panel FC72x IP8
fixed in IP8 SR4
- Siemens Cerberus PRO EN X200 Cloud Distribution IP7
All versions
- Siemens Cerberus PRO EN X200 Cloud Distribution IP8
fixed in V4.3.5618
- Siemens Cerberus PRO EN X300 Cloud Distribution IP7
All versions
- Siemens Cerberus PRO EN X300 Cloud Distribution IP8
fixed in V4.3.5617
- Siemens Cerberus PRO UL Compact Panel FC922/924
fixed in MP4
- Siemens Cerberus PRO UL Engineering Tool
fixed in MP4
- Siemens Cerberus PRO UL X300 Cloud Distribution
fixed in V4.3.0001
- Siemens Desigo Fire Safety UL Compact Panel FC2025/2050
fixed in MP4
- Siemens Desigo Fire Safety UL Engineering Tool
fixed in MP4
- Siemens Desigo Fire Safety UL X300 Cloud Distribution
fixed in V4.3.0001
- Siemens Sinteso FS20 EN Engineering Tool
All versions
- Siemens Sinteso FS20 EN Fire Panel FC20 MP6
All versions
- Siemens Sinteso FS20 EN Fire Panel FC20 MP7
All versions
- Siemens Sinteso FS20 EN Fire Panel FC20 MP8
fixed in MP8 SR4
- Siemens Sinteso FS20 EN X200 Cloud Distribution MP7
All versions
- Siemens Sinteso FS20 EN X200 Cloud Distribution MP8
fixed in V4.3.5618
- Siemens Sinteso FS20 EN X300 Cloud Distribution MP7
All versions
- Siemens Sinteso FS20 EN X300 Cloud Distribution MP8
fixed in V4.3.5617
- Siemens Sinteso Mobile
All versions