description: A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x (All versions < IP8), Cerberus PRO EN X200 Cloud Distribution (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution (All versions < V4.2.5015), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 (All versions < MP8), Sinteso FS20 EN X200 Cloud Distribution (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0). The network communication library in affected systems does not validate the length of certain X.509 certificate attributes which might result in a stack-based buffer overflow.
This could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
problem types: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
affected:
{
vendor: Siemens
product: Cerberus PRO EN Engineering Tool
versions:
status: affected, version: 0, lessThan: IP8, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Cerberus PRO EN Fire Panel FC72x
versions:
status: affected, version: 0, lessThan: IP8, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Cerberus PRO EN X200 Cloud Distribution
versions:
status: affected, version: 0, lessThan: V4.0.5016, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Cerberus PRO EN X300 Cloud Distribution
versions:
status: affected, version: 0, lessThan: V4.2.5015, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Sinteso FS20 EN Engineering Tool
versions:
status: affected, version: 0, lessThan: MP8, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Sinteso FS20 EN Fire Panel FC20
versions:
status: affected, version: 0, lessThan: MP8, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Sinteso FS20 EN X200 Cloud Distribution
versions:
status: affected, version: 0, lessThan: V4.0.5016, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Sinteso FS20 EN X300 Cloud Distribution
versions:
status: affected, version: 0, lessThan: V4.2.5015, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Sinteso Mobile
versions:
status: affected, version: 0, lessThan: V3.0.0, versionType: custom
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 10
baseSeverity: CRITICAL
]