[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUKKtaHtPwu-KZkFnWlG-yqyLBWayfGrEy36ScMjVXdk":3,"g5a-risk:CVE-2022-24287":170},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":67,"references":68,"referencesCount":75,"weaknesses":76,"weaknessesCount":75,"isActivelyExploited":85,"cisaInfo":26,"otxData":26,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":166,"notableEvents":167},"CVE-2022-24287","What is CVE-2022-24287?","A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions \u003C V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions \u003C V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions \u003C V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions \u003C V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.","A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions \u003C V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions...","2022-05-20T13:15:14.68","2023-11-14T11:15:08.413",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"productcert@siemens.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":30,"Type":18,"CVSSData":35,"BaseSeverity":40,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",3.9,6.4,0.00238,[43,43,43,43,43,43,43],"High",[47,52,55,58,61,64],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"siemens","simatic_pcs_7","*","cpe:2.3:a:siemens:simatic_pcs_7:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"9.1","cpe:2.3:a:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:*",{"vendor":48,"product":56,"version":50,"criteria":57,"vulnerable":4},"simatic_wincc","cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*",{"vendor":48,"product":56,"version":59,"criteria":60,"vulnerable":4},"7.5","cpe:2.3:a:siemens:simatic_wincc:7.5:-:*:*:*:*:*:*",{"vendor":48,"product":62,"version":50,"criteria":63,"vulnerable":4},"simatic_wincc_runtime_professional","cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*",{"vendor":48,"product":62,"version":65,"criteria":66,"vulnerable":4},"17","cpe:2.3:a:siemens:simatic_wincc_runtime_professional:17:*:*:*:*:*:*:*",6,[69],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-363107.pdf","Siemens",[73,74],"Patch","Vendor Advisory",1,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.","Developers often choose default values that leave the product as open and easy to use as possible out-of-the-box, under the assumption that the administrator can (or should) change the default value.  However, this ease-of-use comes at a cost when the default is insecure and the administrator does not change it.","Incomplete","Base","Simple",false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2022-24287? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-24287, a high severity cyber security vulnerability from 2022. A vulnerability has been identified in SIMATIC PCS 7 V8.2 (...","CVE-2022-24287, CVE-2022-24287 vulnerability, CVE-2022-24287 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, siemens security, simatic_pcs_7 vulnerability, simatic_wincc vulnerability, simatic_wincc_runtime_professional vulnerability","\u002Fwhat-is\u002Fcve-2022-24287",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-24287","Cybersecurity","CVE-2022-24287, CVE-2022-24287 vulnerability, CVE-2022-24287 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":116,"Negate":26,"CPEMatch":117},"OR",[118,121,123,126,128,131,134,137,140,143,146,149,152,155,158,161,164],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":120},"DFA18372-7E7D-4C51-8FA0-EE193DECB88D","9.0",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8852CFC7-FE90-4654-9F85-9181884F948E",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":125},"CA2E9785-246F-496B-9139-02E2F4003352","7.4",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E79DA14E-419C-49BA-8E4F-2907E1D8937F",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp1:*:*:*:*:*:*","81F9C13C-065C-4E40-BB46-687D791348A9",{"Vulnerable":4,"Criteria":132,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update1:*:*:*:*:*:*","5CF06E69-0A23-418D-B0EC-574DACBB4DD9",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp1_update2:*:*:*:*:*:*","9164EAC1-C416-4F1F-A910-CE84A167A6D1",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2:*:*:*:*:*:*","3422B714-DB0F-4EE3-A7D4-9A0165214563",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update1:*:*:*:*:*:*","70B79B00-F61D-4F10-AD7B-74718F061D9E",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update2:*:*:*:*:*:*","A8766442-CC8D-4221-89B8-F75D195F71E8",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update3:*:*:*:*:*:*","26C08FB9-AFEB-4A53-AAB3-37C9717B30C5",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update4:*:*:*:*:*:*","68896900-7FCC-4BFB-B787-8992B459F00D",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update5:*:*:*:*:*:*","1059B529-02F0-4C85-A35E-2282546FA990",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update6:*:*:*:*:*:*","938D44C5-7B26-4400-970D-B3AA50DDD055",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:siemens:simatic_wincc:7.5:sp2_update7:*:*:*:*:*:*","E9E28D92-0643-4967-94C5-8B8F414158A3",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":162,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":163},"EC34D005-A65F-4AFE-BF1F-53A5AC950A22","16",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":165,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9B76C5CC-652F-4117-8214-E219C12AA082",[],[],{"lastModified":11,"cacheTime":169,"version":36},1792369583990,{"score":171,"band":172,"action":173,"scoredAt":174},46,"Medium","Plan remediation","2026-10-16T06:54:36.875419+00:00"]