CVE-2022-42894 Server-side request forgery in syngo Dynamics
Unauthenticated SSRF in Siemens syngo Dynamics allows attackers to leak NTLM credentials and enumerate local services.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-42894?
CVE-2022-42894 is a high-severity server-side request forgery vulnerability in Siemens syngo Dynamics, published on 17 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as local service enumeration.
Weakness: CWE-918
Which versions are affected by CVE-2022-42894?
It affects 1 product.
Products include Siemens Syngo Dynamics Cardiovascular Imaging and Information System.
How do I fix CVE-2022-42894?
No fix has been published for CVE-2022-42894 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2022-42894 being exploited?
There is no known exploitation of CVE-2022-42894 in the wild and no public exploit code.
Other vulnerabilities in Siemens syngo Dynamics
Sources
Also known as GHSA-57pw-m5mj-m29p.