High severity7.5NVD Advisory· Published Nov 17, 2022· Updated Jun 17, 2026

CVE-2022-42893

Description

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Syngo Dynamics Cardiovascular Imaging And Information System
cpe:2.3:a:siemens:syngo_dynamics_cardiovascular_imaging_and_information_system:*:*:*:*:*:*:*:*
Range: <va40g_hf01
Siemens Foundation/syngo Dynamicsllm-create2 versions
< VA40G HF01+ 1 more
- (no CPE)range: < VA40G HF01
- (no CPE)range: All versions < VA40G HF01

Patches

Vulnerability mechanics

References

www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000