Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:simatic_energy_manager_pro:7.3:-:*:*:*:*:*:*

part: a version: 7.3 update: -

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Energy Manager Pro (da2a48a8-545a-582f-9577-0c35b48be7bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23450 vulnerable 2026-06-08 05:40:57.549456 Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.
Published: 2022-04-12T09:07:38.000Z
Updated: 2024-08-03T03:43:45.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23449 vulnerable 2026-06-08 05:40:57.548921 Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.
Published: 2022-04-12T09:07:37.000Z
Updated: 2024-08-03T03:43:45.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23448 vulnerable 2026-06-08 05:40:57.548422 Details available
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local unprivileged attacker to achieve code execution with ADMINISTRATOR or even NT AUTHORITY/SYSTEM privileges.
Published: 2022-04-12T09:07:35.000Z
Updated: 2024-08-03T03:43:45.944Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.