CVE-2024-22041

Published Mar 12, 2024 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems improperly handles memory buffers when parsing X.509 certificates.
This could allow an unauthenticated remote attacker to crash the network service.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Siemens

Cerberus PRO EN Engineering Tool

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Cerberus PRO EN Fire Panel FC72x IP6

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Cerberus PRO EN Fire Panel FC72x IP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Cerberus PRO EN Fire Panel FC72x IP8

unknown

Version	Status	Constraints
`0`	affected	< IP8 SR4

Siemens

Cerberus PRO EN X200 Cloud Distribution IP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Cerberus PRO EN X200 Cloud Distribution IP8

unknown

Version	Status	Constraints
`0`	affected	< V4.3.5618

Siemens

Cerberus PRO EN X300 Cloud Distribution IP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Cerberus PRO EN X300 Cloud Distribution IP8

unknown

Version	Status	Constraints
`0`	affected	< V4.3.5617

Siemens

Cerberus PRO UL Compact Panel FC922/924

unknown

Version	Status	Constraints
`0`	affected	< MP4

Siemens

Cerberus PRO UL Engineering Tool

unknown

Version	Status	Constraints
`0`	affected	< MP4

Siemens

Cerberus PRO UL X300 Cloud Distribution

unknown

Version	Status	Constraints
`0`	affected	< V4.3.0001

Siemens

Desigo Fire Safety UL Compact Panel FC2025/2050

unknown

Version	Status	Constraints
`0`	affected	< MP4

Siemens

Desigo Fire Safety UL Engineering Tool

unknown

Version	Status	Constraints
`0`	affected	< MP4

Siemens

Desigo Fire Safety UL X300 Cloud Distribution

unknown

Version	Status	Constraints
`0`	affected	< V4.3.0001

Siemens

Sinteso FS20 EN Engineering Tool

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Sinteso FS20 EN Fire Panel FC20 MP6

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Sinteso FS20 EN Fire Panel FC20 MP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Sinteso FS20 EN Fire Panel FC20 MP8

unknown

Version	Status	Constraints
`0`	affected	< MP8 SR4

Siemens

Sinteso FS20 EN X200 Cloud Distribution MP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Sinteso FS20 EN X200 Cloud Distribution MP8

unknown

Version	Status	Constraints
`0`	affected	< V4.3.5618

Siemens

Sinteso FS20 EN X300 Cloud Distribution MP7

unknown

Version	Status	Constraints
`0`	affected	< *

Siemens

Sinteso FS20 EN X300 Cloud Distribution MP8

unknown

Version	Status	Constraints
`0`	affected	< V4.3.5617

Siemens

Sinteso Mobile

unknown

Version	Status	Constraints
`0`	affected	< *

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-19644	A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions), Cerberus PRO EN Fire Panel FC72x IP6 (All versions), Cerberus PRO EN Fire Panel FC72x IP7 (All versions), Cerberus PRO EN Fire Panel FC72x IP8 (All versions < IP8 SR4), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.3.5618), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.3.5617), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions), Sinteso FS20 EN Fire Panel FC20 MP8 (All versions < MP8 SR4), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.3.5618), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.3.5617), Sinteso Mobile (All versions). The network communication library in affected systems improperly handles memory buffers when parsing X.509 certificates. This could allow an unauthenticated remote attacker to crash the network service.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.508% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
https://cert-portal.siemens.com/productcert/html/ssa-225840.html
https://cert-portal.siemens.com/productcert/html/ssa-953710.html

History

Dec 17, 2025 5:15 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'Yes', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Dec 16, 2025 10:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Siemens Siemens cerberus Pro En Engineering Tool Siemens cerberus Pro En Fire Panel Fc72x Siemens cerberus Pro En X200 Cloud Distribution Siemens cerberus Pro En X300 Cloud Distribution Siemens cerberus Pro Ul Compact Panel Siemens cerberus Pro Ul Engineering Tool Siemens cerberus Pro Ul X300 Cloud Siemens desigo Fire Safety Ul Compact Panel Siemens desigo Fire Safety Ul Engineering Tool Siemens sinteso Fs20 En Fire Panel Fc20 Siemens sinteso Fs20 En X200 Cloud Distribution Siemens sinteso Fs20 En X300 Cloud Distribution Siemens sinteso Mobile
CPEs		cpe:2.3:a:siemens:cerberus_pro_en_engineering_tool:-:::::::* cpe:2.3:a:siemens:cerberus_pro_en_fire_panel_fc72x:-:::::::* cpe:2.3:a:siemens:cerberus_pro_en_x200_cloud_distribution:-:::::::* cpe:2.3:a:siemens:cerberus_pro_en_x300_cloud_distribution:-:::::::* cpe:2.3:a:siemens:cerberus_pro_ul_compact_panel:::::::: cpe:2.3:a:siemens:cerberus_pro_ul_engineering_tool:::::::: cpe:2.3:a:siemens:cerberus_pro_ul_x300_cloud:::::::: cpe:2.3:a:siemens:desigo_fire_safety_ul_compact_panel:::::::: cpe:2.3:a:siemens:desigo_fire_safety_ul_engineering_tool:::::::: cpe:2.3:a:siemens:sinteso_fs20_en_fire_panel_fc20:-:::::::* cpe:2.3:a:siemens:sinteso_fs20_en_x200_cloud_distribution:::::::: cpe:2.3:a:siemens:sinteso_fs20_en_x300_cloud_distribution:::::::: cpe:2.3:a:siemens:sinteso_mobile::::::::
Vendors & Products		Siemens Siemens cerberus Pro En Engineering Tool Siemens cerberus Pro En Fire Panel Fc72x Siemens cerberus Pro En X200 Cloud Distribution Siemens cerberus Pro En X300 Cloud Distribution Siemens cerberus Pro Ul Compact Panel Siemens cerberus Pro Ul Engineering Tool Siemens cerberus Pro Ul X300 Cloud Siemens desigo Fire Safety Ul Compact Panel Siemens desigo Fire Safety Ul Engineering Tool Siemens sinteso Fs20 En Fire Panel Fc20 Siemens sinteso Fs20 En X200 Cloud Distribution Siemens sinteso Fs20 En X300 Cloud Distribution Siemens sinteso Mobile
Metrics		ssvc `{'options': {'Automatable': 'Yes', 'Exploitation': 'None', 'Technical Impact': 'Total'}, 'version': '2.0.3'}`

Subscriptions

Siemens Cerberus Pro En Engineering Tool Cerberus Pro En Fire Panel Fc72x Cerberus Pro En X200 Cloud Distribution Cerberus Pro En X300 Cloud Distribution Cerberus Pro Ul Compact Panel Cerberus Pro Ul Engineering Tool Cerberus Pro Ul X300 Cloud Desigo Fire Safety Ul Compact Panel Desigo Fire Safety Ul Engineering Tool Sinteso Fs20 En Fire Panel Fc20 Sinteso Fs20 En X200 Cloud Distribution Sinteso Fs20 En X300 Cloud Distribution Sinteso Mobile

Weaknesses