CVE-2022-23450

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the affected software, an unauthenticated attacker could exploit this vulnerability by sending a maliciously crafted serialized object. This could allow the attacker to execute arbitrary code on the device with SYSTEM privileges.

• CWE-502
• CWE-502

• https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdfMitigation, Patch, Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdfMitigation, Patch, Vendor Advisory

Published

Apr 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23443An improper access control in Fortinet FortiSOAR before 7.2.…7.5
• CVE-2022-23446A improper control of a resource through its lifetime in For…4.4
• CVE-2022-23447An improper limitation of a pathname to a restricted directo…7.5
• CVE-2022-23448A vulnerability has been identified in SIMATIC Energy Manage…7.8
• CVE-2022-23449A vulnerability has been identified in SIMATIC Energy Manage…7.3
• CVE-2022-2345Use After Free in GitHub repository vim/vim prior to 9.0.004…7.8
• CVE-2022-23451An authorization flaw was found in openstack-barbican. The d…8.1
• CVE-2022-23452An authorization flaw was found in openstack-barbican, where…4.9
• CVE-2022-23453Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23454Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23455Potential security vulnerabilities have been identified in H…7.8
• CVE-2022-23456Potential arbitrary file deletion vulnerability has been ide…5.5