High severity7.5NVD Advisory· Published Nov 17, 2022· Updated Jun 17, 2026

CVE-2022-42894

Description

A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as local service enumeration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Syngo Dynamics Cardiovascular Imaging And Information System
cpe:2.3:a:siemens:syngo_dynamics_cardiovascular_imaging_and_information_system:*:*:*:*:*:*:*:*
Range: <va40g_hf01
Siemens Foundation/syngo Dynamicsllm-create2 versions
< VA40G HF01+ 1 more
- (no CPE)range: < VA40G HF01
- (no CPE)range: All versions < VA40G HF01
Syngo Dynamics/syngo Dynamicsllm-create
Range: < VA40G HF01

Patches

Vulnerability mechanics

References

www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-741697nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000