{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "EN100 Ethernet module PROFINET IO variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC 104 variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module DNP3 IP variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module Modbus TCP variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential ARM (6MD7881-2AA30) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V34.0 versions ant\u00e9rieures \u00e0 34.0.250",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential Intel (6MD7881-2AA40) versions ant\u00e9rieures \u00e0 2.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 8 ant\u00e9rieures \u00e0 8.18.18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization toutes versions 14.0.x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8000 MASTER MODULE WITH I/O -40/+70\u00b0C (6MF2101-1AB10-0AA0) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Disques SINAMICS PERFECT HARMONY GH180 Drives fabriqu\u00e9s depuis 2015 avant 2021",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV550 H (6GF3550-0GE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "JT2Go versions ant\u00e9rieures \u00e0 13.3.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V33.1 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits SIMATIC concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential with GDS ARM (6MD7881-2AA10) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV540 S (6GF3540-0CD10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions ant\u00e9rieures \u00e0 3.0.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV550 S (6GF3550-0CD10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix 9 versions sup\u00e9rieures ou \u00e9gales \u00e0 9.11 et ant\u00e9rieures \u00e0 9.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Excel Importer Module (Mendix 8 compatible) versions ant\u00e9rieures \u00e0 9.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC 61850 variant versions ant\u00e9rieures \u00e0 4.40",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V34.1 versions ant\u00e9rieures \u00e0 34.1.233",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 (9.12) ant\u00e9rieures \u00e0 9.12.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8000 MASTER MODULE WITH I/O -25/+70\u00b0C (6MF2101-0AB10-0AA0) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) versions ant\u00e9rieures \u00e0 22.00",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Simcenter Femap toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV560 U (6GF3560-0LE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8021 MASTER MODULE (6MF2802-1AA00) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 ant\u00e9rieures \u00e0 9.14.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) \u00e0 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV560 X (6GF3560-0HE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits RUGGEDCOM concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V12.4 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) \u00e0 SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits SCALANCE concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V14.0 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions 13.1 ant\u00e9rieures \u00e0 13.1.20220624",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) versions ant\u00e9rieures \u00e0 3.0.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 (9.6) ant\u00e9rieures \u00e0 9.6.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V13.2 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions 13.2 ant\u00e9rieures \u00e0 13.2.20220624",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV540 H (6GF3540-0GE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "PADS Standard/Plus Viewer toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix 9 versions 9.12 ant\u00e9rieure \u00e0 9.12.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Simcenter Femap versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Excel Importer Module (Mendix 9 compatible) versions ant\u00e9rieures \u00e0 10.1.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 7 ant\u00e9rieures \u00e0 7.23.31",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROX MX5000 \u00e0 RX5000 versions ant\u00e9rieures \u00e0 2.15.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) versions ant\u00e9rieures \u00e0 2.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-34820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34820"
    },
    {
      "name": "CVE-2022-34819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34819"
    },
    {
      "name": "CVE-2022-34277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34277"
    },
    {
      "name": "CVE-2022-31257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31257"
    },
    {
      "name": "CVE-2022-34288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34288"
    },
    {
      "name": "CVE-2022-29884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29884"
    },
    {
      "name": "CVE-2022-34280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34280"
    },
    {
      "name": "CVE-2022-28809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28809"
    },
    {
      "name": "CVE-2022-34663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34663"
    },
    {
      "name": "CVE-2022-34286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34286"
    },
    {
      "name": "CVE-2021-44222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44222"
    },
    {
      "name": "CVE-2022-29560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29560"
    },
    {
      "name": "CVE-2022-34748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34748"
    },
    {
      "name": "CVE-2022-34287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34287"
    },
    {
      "name": "CVE-2022-34275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34275"
    },
    {
      "name": "CVE-2022-34291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34291"
    },
    {
      "name": "CVE-2022-34274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34274"
    },
    {
      "name": "CVE-2022-34273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34273"
    },
    {
      "name": "CVE-2022-28808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28808"
    },
    {
      "name": "CVE-2021-29998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29998"
    },
    {
      "name": "CVE-2022-33736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33736"
    },
    {
      "name": "CVE-2022-34466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34466"
    },
    {
      "name": "CVE-2022-34272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34272"
    },
    {
      "name": "CVE-2022-34284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34284"
    },
    {
      "name": "CVE-2022-26648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26648"
    },
    {
      "name": "CVE-2022-34276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34276"
    },
    {
      "name": "CVE-2022-34289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34289"
    },
    {
      "name": "CVE-2022-34821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34821"
    },
    {
      "name": "CVE-2022-28807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28807"
    },
    {
      "name": "CVE-2022-34465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34465"
    },
    {
      "name": "CVE-2022-33137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33137"
    },
    {
      "name": "CVE-2022-34283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34283"
    },
    {
      "name": "CVE-2022-34278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34278"
    },
    {
      "name": "CVE-2022-34282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34282"
    },
    {
      "name": "CVE-2022-34290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34290"
    },
    {
      "name": "CVE-2022-26647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26647"
    },
    {
      "name": "CVE-2022-34279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34279"
    },
    {
      "name": "CVE-2022-34467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34467"
    },
    {
      "name": "CVE-2022-34281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34281"
    },
    {
      "name": "CVE-2022-26649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26649"
    },
    {
      "name": "CVE-2021-44221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44221"
    },
    {
      "name": "CVE-2022-34464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34464"
    },
    {
      "name": "CVE-2022-34285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34285"
    },
    {
      "name": "CVE-2022-33138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33138"
    },
    {
      "name": "CVE-2022-2069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-2069"
    },
    {
      "name": "CVE-2022-30938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30938"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-627",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-07-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-517377 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-517377.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-599506 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-599506.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-243317 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-243317.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-429204 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-429204.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-829738 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-829738.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-610768 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-610768.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-492173 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-492173.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-348662 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-348662.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-580125 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-580125.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-840800 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-840800.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-225578 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-225578.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-491621 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-491621.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-433782 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-433782.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-910883 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-910883.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-474231 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-474231.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-865333 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-865333.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-439148 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-439148.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-310038 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-310038.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-944952 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-944952.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "EN100 Ethernet module PROFINET IO variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC 104 variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module DNP3 IP variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module Modbus TCP variant toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential ARM (6MD7881-2AA30) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V34.0 versions ant\u00e9rieures \u00e0 34.0.250",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential Intel (6MD7881-2AA40) versions ant\u00e9rieures \u00e0 2.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 8 ant\u00e9rieures \u00e0 8.18.18",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization toutes versions 14.0.x",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8000 MASTER MODULE WITH I/O -40/+70\u00b0C (6MF2101-1AB10-0AA0) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Disques SINAMICS PERFECT HARMONY GH180 Drives fabriqu\u00e9s depuis 2015 avant 2021",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV550 H (6GF3550-0GE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "JT2Go versions ant\u00e9rieures \u00e0 13.3.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V33.1 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits SIMATIC concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential with GDS ARM (6MD7881-2AA10) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV540 S (6GF3540-0CD10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions ant\u00e9rieures \u00e0 3.0.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization versions 13.3.x ant\u00e9rieures \u00e0 13.3.0.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV550 S (6GF3550-0CD10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix 9 versions sup\u00e9rieures ou \u00e9gales \u00e0 9.11 et ant\u00e9rieures \u00e0 9.15",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Excel Importer Module (Mendix 8 compatible) versions ant\u00e9rieures \u00e0 9.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "EN100 Ethernet module IEC 61850 variant versions ant\u00e9rieures \u00e0 4.40",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Parasolid V34.1 versions ant\u00e9rieures \u00e0 34.1.233",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 (9.12) ant\u00e9rieures \u00e0 9.12.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8000 MASTER MODULE WITH I/O -25/+70\u00b0C (6MF2101-0AB10-0AA0) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) versions ant\u00e9rieures \u00e0 22.00",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Simcenter Femap toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV560 U (6GF3560-0LE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8021 MASTER MODULE (6MF2802-1AA00) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00) versions ant\u00e9rieures \u00e0 CPC80 V16.30",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 ant\u00e9rieures \u00e0 9.14.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) \u00e0 SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV560 X (6GF3560-0HE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROS toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits RUGGEDCOM concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V12.4 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) \u00e0 SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) toutes versions : Se r\u00e9f\u00e9rer \u00e0 l\u0027avis \u00e9diteur pour la liste exacte des produits SCALANCE concern\u00e9s et des correctifs disponibles",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V14.0 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions 13.1 ant\u00e9rieures \u00e0 13.1.20220624",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) versions ant\u00e9rieures \u00e0 3.0.22",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 9 (9.6) ant\u00e9rieures \u00e0 9.6.12",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Teamcenter Visualization V13.2 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Opcenter Quality versions 13.2 ant\u00e9rieures \u00e0 13.2.20220624",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC MV540 H (6GF3540-0GE10) versions ant\u00e9rieures \u00e0 3.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "PADS Standard/Plus Viewer toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix 9 versions 9.12 ant\u00e9rieure \u00e0 9.12.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Simcenter Femap versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Excel Importer Module (Mendix 9 compatible) versions ant\u00e9rieures \u00e0 10.1.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "Mendix Applications using Mendix versions 7 ant\u00e9rieures \u00e0 7.23.31",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "RUGGEDCOM ROX MX5000 \u00e0 RX5000 versions ant\u00e9rieures \u00e0 2.15.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) versions ant\u00e9rieures \u00e0 2.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-34820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34820"
    },
    {
      "name": "CVE-2022-34819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34819"
    },
    {
      "name": "CVE-2022-34277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34277"
    },
    {
      "name": "CVE-2022-31257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31257"
    },
    {
      "name": "CVE-2022-34288",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34288"
    },
    {
      "name": "CVE-2022-29884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29884"
    },
    {
      "name": "CVE-2022-34280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34280"
    },
    {
      "name": "CVE-2022-28809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28809"
    },
    {
      "name": "CVE-2022-34663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34663"
    },
    {
      "name": "CVE-2022-34286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34286"
    },
    {
      "name": "CVE-2021-44222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44222"
    },
    {
      "name": "CVE-2022-29560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29560"
    },
    {
      "name": "CVE-2022-34748",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34748"
    },
    {
      "name": "CVE-2022-34287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34287"
    },
    {
      "name": "CVE-2022-34275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34275"
    },
    {
      "name": "CVE-2022-34291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34291"
    },
    {
      "name": "CVE-2022-34274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34274"
    },
    {
      "name": "CVE-2022-34273",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34273"
    },
    {
      "name": "CVE-2022-28808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28808"
    },
    {
      "name": "CVE-2021-29998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-29998"
    },
    {
      "name": "CVE-2022-33736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33736"
    },
    {
      "name": "CVE-2022-34466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34466"
    },
    {
      "name": "CVE-2022-34272",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34272"
    },
    {
      "name": "CVE-2022-34284",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34284"
    },
    {
      "name": "CVE-2022-26648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26648"
    },
    {
      "name": "CVE-2022-34276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34276"
    },
    {
      "name": "CVE-2022-34289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34289"
    },
    {
      "name": "CVE-2022-34821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34821"
    },
    {
      "name": "CVE-2022-28807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-28807"
    },
    {
      "name": "CVE-2022-34465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34465"
    },
    {
      "name": "CVE-2022-33137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33137"
    },
    {
      "name": "CVE-2022-34283",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34283"
    },
    {
      "name": "CVE-2022-34278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34278"
    },
    {
      "name": "CVE-2022-34282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34282"
    },
    {
      "name": "CVE-2022-34290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34290"
    },
    {
      "name": "CVE-2022-26647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26647"
    },
    {
      "name": "CVE-2022-34279",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34279"
    },
    {
      "name": "CVE-2022-34467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34467"
    },
    {
      "name": "CVE-2022-34281",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34281"
    },
    {
      "name": "CVE-2022-26649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26649"
    },
    {
      "name": "CVE-2021-44221",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44221"
    },
    {
      "name": "CVE-2022-34464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34464"
    },
    {
      "name": "CVE-2022-34285",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34285"
    },
    {
      "name": "CVE-2022-33138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33138"
    },
    {
      "name": "CVE-2022-2069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-2069"
    },
    {
      "name": "CVE-2022-30938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30938"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-627",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-07-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-517377 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-517377.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-599506 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-599506.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-243317 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-243317.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-429204 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-429204.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-829738 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-829738.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-610768 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-610768.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-492173 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-492173.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-348662 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-348662.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-580125 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-580125.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-840800 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-840800.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-225578 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-225578.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-491621 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-491621.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-433782 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-433782.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-910883 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-910883.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-474231 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-474231.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-865333 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-865333.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-439148 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-439148.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-310038 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-310038.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-944952 du 12 juillet 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-944952.html"
    }
  ]
}

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-34466"
    }
  },
  "description": "Mendix\u662f\u4e00\u4e2a\u9ad8\u751f\u4ea7\u529b\u7684\u5e94\u7528\u7a0b\u5e8f\u5e73\u53f0\uff0c\u80fd\u591f\u5927\u89c4\u6a21\u5730\u6784\u5efa\u548c\u6301\u7eed\u6539\u8fdb\u79fb\u52a8\u548cWeb\u5e94\u7528\u7a0b\u5e8f\u3002\n\nSiemens Mendix\u5b58\u5728\u8868\u8fbe\u5f0f\u6ce8\u5165\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6cc4\u9732\u7279\u5b9a\u914d\u7f6e\u4e2d\u7684\u654f\u611f\u4fe1\u606f\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a \r\nhttps://cert-portal.siemens.com/productcert/html/ssa-492173.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-51637",
  "openTime": "2022-07-15",
  "patchDescription": "Mendix\u662f\u4e00\u4e2a\u9ad8\u751f\u4ea7\u529b\u7684\u5e94\u7528\u7a0b\u5e8f\u5e73\u53f0\uff0c\u80fd\u591f\u5927\u89c4\u6a21\u5730\u6784\u5efa\u548c\u6301\u7eed\u6539\u8fdb\u79fb\u52a8\u548cWeb\u5e94\u7528\u7a0b\u5e8f\u3002\r\n\r\nSiemens Mendix\u5b58\u5728\u8868\u8fbe\u5f0f\u6ce8\u5165\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6cc4\u9732\u7279\u5b9a\u914d\u7f6e\u4e2d\u7684\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Mendix\u8868\u8fbe\u5f0f\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens Mendix Applications using Mendix 9 \u003e=9.11\uff0c\u003c9.15",
      "Siemens Mendix Applications using Mendix 9 \u003c9.12.3"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-492173.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-07-15",
  "title": "Siemens Mendix\u8868\u8fbe\u5f0f\u6ce8\u5165\u6f0f\u6d1e"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Mendix Applications using Mendix 9",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V9.11 \u003c V9.15"
            }
          ]
        },
        {
          "product": "Mendix Applications using Mendix 9 (V9.12)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V9.12.3"
            }
          ]
        }
      ],
      "source": "productcert@siemens.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "16D49D7F-4CAC-4A92-9CA7-0BDCDAD5B41D",
              "versionEndExcluding": "9.15.0",
              "versionStartIncluding": "9.11.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en las aplicaciones Mendix usando Mendix 9 (Todas las versiones posteriores a V9.11 incluy\u00e9ndola, anteriores a V9.15), Aplicaciones Mendix usando Mendix 9 (V9.12) (Todas las versiones anteriores a V9.12.3). Se ha detectado una vulnerabilidad de inyecci\u00f3n de expresiones en el subsistema Workflow de Mendix Runtime, que puede afectar a las aplicaciones en ejecuci\u00f3n. La vulnerabilidad podr\u00eda permitir a un usuario malicioso filtrar informaci\u00f3n confidencial en una determinada configuraci\u00f3n"
    }
  ],
  "id": "CVE-2022-34466",
  "lastModified": "2026-06-17T04:50:24.320",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 3.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-07-12T10:15:12.087",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-917"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2022-34466"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-74",
      "CWE-917"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-07-12T10:15:00Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration.",
  "id": "GHSA-3jpc-997v-x927",
  "modified": "2022-07-21T00:00:31Z",
  "published": "2022-07-13T00:01:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34466"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2022-34466",
    "description": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration.",
    "id": "GSD-2022-34466"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-34466"
      ],
      "details": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration.",
      "id": "GSD-2022-34466",
      "modified": "2023-12-13T01:19:18.639940Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "productcert@siemens.com",
        "ID": "CVE-2022-34466",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Mendix Applications using Mendix 9",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003e= V9.11 \u003c V9.15"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix Applications using Mendix 9 (V9.12)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V9.12.3"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Siemens"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf",
            "refsource": "MISC",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "9.15.0",
                "versionStartIncluding": "9.11.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-34466"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \u003e= V9.11 \u003c V9.15), Mendix Applications using Mendix 9 (V9.12) (All versions \u003c V9.12.3). An expression injection vulnerability was discovered in the Workflow subsystem of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information in a certain configuration."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-917"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "N/A",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 3.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 6.8,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-06-29T15:34Z",
      "publishedDate": "2022-07-12T10:15Z"
    }
  }
}