Known vulnerabilities in Desigo PXC5

Vendor: Siemens
Software: Desigo PXC5
Software CPE: cpe:2.3:h:siemens:desigo_pxc5:*:*:*:*:*:*:*:*
Website: https://www.siemens.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Desigo PXC5 Desigo PXC5 is affected by 8 known vulnerabilities: 5 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63071 - Uncaught Exception
CVE-2021-41545		 CWE-248 Medium
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63070 - Improper input validation
CVE-2022-24039		 CWE-20 Medium
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63069 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2022-24045		 CWE-614 Low
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63068 - Improper Restriction of Excessive Authentication Attempts
CVE-2022-24044		 CWE-307 Medium
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63067 - Observable discrepancy
CVE-2022-24043		 CWE-203 Medium
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63064 - Insufficient Session Expiration
CVE-2022-24042		 CWE-613 Medium
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63061 - Use of Password Hash With Insufficient Computational Effort
CVE-2022-24041		 CWE-916 Low
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124
#VU63056 - Resource exhaustion
CVE-2022-24040		 CWE-400 Low
No
No
 02.20.142.10-10884 11.05.2022 SB2022051124