CVE-2023-52952
Description
A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro (J31032-K2017-H260) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 18 pro+ (J31032-K2017-H436) (All versions >= V11.5.1 < V11.6.2). The Kiosk Mode of the affected devices contains a restricted desktop environment escape vulnerability. This could allow an unauthenticated local attacker to escape the restricted environment and gain access to the underlying operating system.
How to fix
- Siemens HiMed Cockpit 12 proV11.6.2 or later
- Siemens HiMed Cockpit 14 pro+V11.6.2 or later
- Siemens HiMed Cockpit 18 proV11.6.2 or later
- Siemens HiMed Cockpit 18 pro+V11.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens HiMed Cockpit 12 pro | V11.5.1 ≤ v < V11.6.2 | V11.6.2 |
| Siemens HiMed Cockpit 14 pro+ | V11.5.1 ≤ v < V11.6.2 | V11.6.2 |
| Siemens HiMed Cockpit 18 pro | V11.5.1 ≤ v < V11.6.2 | V11.6.2 |
| Siemens HiMed Cockpit 18 pro+ | V11.5.1 ≤ v < V11.6.2 | V11.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.