VYPR
← All advisories
High severity7.3NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-23449

CVE-2022-23449

Description

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path.

Affected products

8
  • Siemens Foundation/Simatic Energy Manager Basic5 versions
    cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:siemens:simatic_energy_manager_basic:*:*:*:*:*:*:*:*range: <7.3
    • cpe:2.3:a:siemens:simatic_energy_manager_basic:7.3:-:*:*:*:*:*:*
    • (no CPE)range: < V7.3 Update 1
    • (no CPE)range: All versions < V7.3 Update 1
    • (no CPE)range: All versions < V7.3 Update 1
  • Siemens Foundation/Simatic Energy Manager Pro3 versions
    cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:simatic_energy_manager_pro:*:*:*:*:*:*:*:*range: <7.3
    • cpe:2.3:a:siemens:simatic_energy_manager_pro:7.3:-:*:*:*:*:*:*
    • (no CPE)range: < V7.3 Update 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.