SIMATIC Energy Manager Basic vulnerabilities

3 known vulnerabilities in SIMATIC Energy Manager Basic from Siemens. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SIMATIC Energy Manager Basic: Deserialization of Untrusted Data

  CVE-2022-23450Apr 12, 2022SiemensEPSS 35.7%

  A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserial

• 7.3 High severity

  SIMATIC Energy Manager Basic: Uncontrolled Search Path Element

  CVE-2022-23449Apr 12, 2022Siemens

  A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges b

• 7.8 High severity

  SIMATIC Energy Manager Basic: Incorrect Permission Assignment for Critical Resource

  CVE-2022-23448Apr 12, 2022Siemens

  A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the app