Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-52952

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435) (All versions >= V11.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro (J31032-K2017-H260) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro+ (J31032-K2017-H436) (All versions >= V11.5.1 < V11.6.2). The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to escape the restricted environment and gain access to the underlying operating system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens HiMed Cockpit 12 pro

Default version status: unknown

  • V11.5.1 to < V11.6.2affected

Siemens HiMed Cockpit 14 pro+

Default version status: unknown

  • V11.5.1 to < V11.6.2affected

Siemens HiMed Cockpit 18 pro

Default version status: unknown

  • V11.5.1 to < V11.6.2affected

Siemens HiMed Cockpit 18 pro+

Default version status: unknown

  • V11.5.1 to < V11.6.2affected

References