Known vulnerabilities in Desigo CC

Known vulnerabilities in Desigo CC

Vendor: Siemens

Software: Desigo CC

Software CPE: cpe:2.3:a:siemens:desigo_cc:*:*:*:*:*:*:*:*

Website: https://www.siemens.com/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU109455 - Missing Authentication for Critical Function CVE-2024-23815	CWE-306	High	No	No	-	20.05.2025	SB2025052021
#VU80650 - Heap-based Buffer Overflow CVE-2023-3935	CWE-122	High	No	No	-	12.09.2023	SB2023091244 SB2023111628 SB2024010512
#VU64575 - Use of Client-Side Authentication CVE-2022-33139	CWE-603	High	No	No	-	22.06.2022	SB2022062210 SB2022101313
#VU56640 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-31891	CWE-78	High	No	No	-	16.09.2021	SB2021091605
#VU56626 - Deserialization of Untrusted Data CVE-2021-37181	CWE-502	High	No	No	5.0 QU1	15.09.2021	SB2021091522
#VU55442 - Out-of-bounds read CVE-2021-20093	CWE-125	High	No	No	-	30.07.2021	SB2021073002 SB2023111628
#VU55441 - Out-of-bounds read CVE-2021-20094	CWE-125	Medium	No	No	-	30.07.2021	SB2021073002 SB2023111628
#VU45632 - Improper Control of Generation of Code ('Code Injection') CVE-2020-10055	CWE-94	High	No	No	-	12.08.2020	SB2020081248