CVE-2022-42891

CVSS 7.5 HIGHEPSS 0.5%CWE-73

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Siemens · syngo Dynamics

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697