CVE:CVE-2022-24045
CNNVD:CNNVD-202205-2983
Siemens Desigo DXR2等都是德国西门子（Siemens）公司的一个楼宇自动化和控制产品。
Siemens Desigo PXC和 DXR 存在安全漏洞，未经授权的远程攻击者可访问系统上的敏感信息。以下产品及版本受到影响：Desigo DXR2 01.21.142.5-22之前版本，Desigo PXC3 01.21.142.4-1之前版本，Desigo PXC4 02.20.142.10-10884之前版本，Desigo PXC5 02.20.142.10-10884之前版本。
solution:Upgrade siemens desigo_dxr2_firmware to a higher version than 01.21.142.5-22,and avoid the version (,01.21.142.5-22); Upgrade siemens desigo_pxc3_firmware to a higher version than 01.21.142.4-18,and avoid the version (,01.21.142.4-18); Upgrade siemens desigo_pxc4_firmware to a higher version than 02.20.142.10-10884,and avoid the version (,02.20.142.10-10884); Upgrade siemens desigo_pxc5_firmware to a higher version than 02.20.142.10-10884,and avoid the version (,02.20.142.10-10884)