ID
VAR-202508-2172
TITLE
SIEMENS Desigo CC family and SENTRON Powermanager privilege escalation vulnerability
Trust: 0.6
DESCRIPTION
The Desigo CC product family includes Desigo CC (an integrated building management platform for managing high-performance buildings), Desigo CC Compact (a solution tailored for small and medium-sized buildings), Desigo CC Connect (a software gateway based on the Desigo CC platform), and Cerberus DMS (a hazard management station that helps users manage fire safety and security incidents). SENTRON Powermanager power monitoring software analyzes energy consumption by displaying key characteristics of individual devices and the entire system in an easy-to-understand dashboard. A privilege escalation vulnerability exists in the SIEMENS Desigo CC family and SENTRON Powermanager, which could be exploited by an attacker to escalate privileges.
Trust: 0.6
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | desigo cc family all | scope: | eq | version: | v5.0 | Trust: 0.6 |
| vendor: | siemens | model: | desigo cc family all | scope: | eq | version: | v5.1 | Trust: 0.6 |
| vendor: | siemens | model: | desigo cc family all | scope: | eq | version: | v6 | Trust: 0.6 |
| vendor: | siemens | model: | desigo cc family all | scope: | eq | version: | v7 | Trust: 0.6 |
| vendor: | siemens | model: | desigo cc family all | scope: | eq | version: | v8 | Trust: 0.6 |
| vendor: | siemens | model: | sentron powermanager all | scope: | eq | version: | v5 | Trust: 0.6 |
| vendor: | siemens | model: | sentron powermanager all | scope: | eq | version: | v6 | Trust: 0.6 |
| vendor: | siemens | model: | sentron powermanager all | scope: | eq | version: | v7 | Trust: 0.6 |
| vendor: | siemens | model: | sentron powermanager all | scope: | eq | version: | v8 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
PATCH
| title: | Patch for SIEMENS Desigo CC family and SENTRON Powermanager privilege escalation vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/723026 | Trust: 0.6 |
EXTERNAL IDS
| db: | SIEMENS | id: | SSA-201595 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2025-19353 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-201595.html | Trust: 0.6 |
SOURCES
| db: | CNVD | id: | CNVD-2025-19353 |
LAST UPDATE DATE
2025-08-26T23:32:58.952000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-19353 | date: | 2025-08-22T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-19353 | date: | 2025-08-14T00:00:00 |