Simatic Energy Manager Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Siemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f) |
|---|---|
| Product | Simatic Energy Manager Pro (da2a48a8-545a-582f-9577-0c35b48be7bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-52891 |
vulnerable | 2026-06-08 06:17:55.842462 |
Details available
MEDIUM (5.3)
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.
Published: 2024-07-09T12:04:42.619Z
Updated: 2025-08-27T20:42:53.094Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23450 |
vulnerable | 2026-06-08 05:40:57.549409 |
Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.
Published: 2022-04-12T09:07:38.000Z
Updated: 2024-08-03T03:43:45.971Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23449 |
vulnerable | 2026-06-08 05:40:57.548877 |
Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.
Published: 2022-04-12T09:07:37.000Z
Updated: 2024-08-03T03:43:45.997Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23448 |
vulnerable | 2026-06-08 05:40:57.547006 |
Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
Published: 2022-04-12T09:07:35.000Z
Updated: 2024-08-03T03:43:45.944Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.