Headline
CVE-2022-40182
A vulnerability has been identified in Desigo PXM30-1 (All versions < V02.20.126.11-41), Desigo PXM30.E (All versions < V02.20.126.11-41), Desigo PXM40-1 (All versions < V02.20.126.11-41), Desigo PXM40.E (All versions < V02.20.126.11-41), Desigo PXM50-1 (All versions < V02.20.126.11-41), Desigo PXM50.E (All versions < V02.20.126.11-41), PXG3.W100-1 (All versions < V02.20.126.11-37), PXG3.W100-2 (All versions < V02.20.126.11-41), PXG3.W200-1 (All versions < V02.20.126.11-37), PXG3.W200-2 (All versions < V02.20.126.11-41). The device embedded Chromium-based browser is launched as root with the “–no-sandbox” option. Attackers can add arbitrary JavaScript code inside “Operation” graphics and successfully exploit any number of publicly known vulnerabilities against the version of the embedded Chromium-based browser.
%PDF-1.5 %���� 65 0 obj << /Length 1980 /Filter /FlateDecode >> stream x��Z[S�8~�W�ѩZ����5/LCo��0͒�3[3�`C�6$�ā��ߑd��dB�~˲tn:��’�<�Ix�σG�Is�̒�ub9˳,��1#l2%�����-‘�ޡ�y�/��y�P��������]���S�4v]��C{m��|:Z���=����tp:8�߁�A<�f�H����ɓ���p�\������6���’����Ts]�I�Y�1��]2s͜�"C|�D(洵�2��,�����\��vHÄ�G����ϊr��}d &b�$,wj݃�帮f�r�|)S���1+M��RIf�^!��imv�O�r%�����LZ^-J�L�����H��%����C"��.G�\o8��t9����WuU.�=��2�FG4R��WR�e�v9B�P��T��eΜѝW9��#BgX��p�ʭ~R.��i��Nɣi�+�3�w�F~�|#�翝���>��о:$sN�}Z2�a����j3u�7��J���h����jX��t����.�a7ɵL%�%}(I��B �L��s��Ü��(�2V����~9���8�S/�i9_@;fk����`�uާ~?L�ʆ֏Ţ���p:’lfҜ�O�D�5�p�J�:�P�Öܭ�D�-�Y\������E���?�|#��I�o�x�����1��>�����I��w���@i�a�=AX� �s瑋����k�ԟ��{�T��N�M����1¬�n�/ǣ�Y��Sʼ�x; +����R�RD�,�R���’�W(�I�i�Φ5Ң��/���s".:K�0��fiW�k"1�|�Io��������=]���b~U��%WE�����d� w��a�\4��eTN`YhO��Շ����o���K�C\a�ݨjLD�z�q���57B\��1���Ql�4��-�bOD�-�̃�G���s� �%�g���~�k���7>g�Q\��rX7�f�LF�a螗ђ"$LWu��M߃�1���C,�����=Y����U���ڣ���D���Ç���ӓ:)�v�`;0��L�@QA���L0k�.�I�2��_P�}<�|?�؏mP�p6���$�!f���Y��_N�x0��`6i��c�h���&Y\v���ǟ/���KK��K� �P�v粵3�T����a �R�K琑5’;8�4�l2�I6z.�N{�(������c�h���z����x� l�E��E�r�m+�?�R�{ �<�0D+=�l’��,S���C:Pf�u��ⴏ굀\�GUة��3�Q��|���N�n��Q����(lv{b�V�f;�4��r�v� �ۙm �8�?�ȏ�X���/�:E=�#C]��|�11� �@���]#�� �n���&�B@�2���r�3�u�P�K����]�披���iˍ_}���L620Z�^���W3�ޢG��=��Dڐ��^���F�Ē��5��آ \t�V�EZ,g3rH���S�#��xv5� ����)�’ �(9|�Ң�{��8L#>��l���Q�\Z�j2Z.�@ƿ�\��E�W蔁N G��G��h�M� ڱ<�n�U%��Hp��U.w$Y��N��%���Ht���/^$b�� �N�+�x��� �ۀ3��ۃ�r�P|[�P�bNe� B��$��d[��{�@���V�a���Ҁv\�@B��^$^����mB�& �@y���!�?x}[����!B:5_�N���& \u;%w�A�� �}����=���x�[Ҷ����4ү��#��jr�-BH�#��5!B`�2�"��c���)Y\7��(!�dV����o��#���>��nI܇� H���9H�L�D�)HÙ�+�����$��d[N�T�)��/��oC��mR��c�’����x뻥ޡP���iD�W[�{:�h!Uz�Cz71�h��$�f3��� Ŭ endstream endobj 80 0 obj << /Length 2385 /Filter /FlateDecode >> stream x��ZKs�8��W�HU�`� L���x���$^[��Vf�Dɬ�H�H�����@��d�9�\xl��� �4�E4:?�qtt��"K��:M���u�XKK��$�_��"+���’&�����`�T��_����.�J�4S7��{�_���z\��] `�h��解����G�{P@�D�h�8���&�질aMt�V."�QR@]����:���G�fD)�)�Zݓ�ke�d(i# S�)�!�;<���L���{�MV�2x旷����K(�Q�E����Q4Op #V)/�d>���\�٪������('��5al(��)x�n��y �1A�� Lo]��?,’i� �*�q]�vKQ7��v�C�c*Akv�&�����r���x<.�:�8�Ul���G�r������㸜�J)�����{sc.����t2�kP3 A���%$�j?��-o�4/�b��m�;k�(H<��!8\a��z����+q[�����fsa���d]�0K���I�e2&�rq<����x�L�*# T���;��:���Qk�0� �)�O�}6ȶ\�_��/!I�j¥~��|J�O��_���(�W#��A��������(z9h����:9h� k��%- �����ILr9<dۉM����a�p� � ��AYp)�r��_�p8��pm-��A%���թA�$�_jPJ#�oH P�c��S�s1��Պ’�H~3*�AB�/_�x�5�\�����kc��� �2�:{}n��B���� �&�7�����znx6ȶ[J����á2�D¡1/@���m��W� ��� /`�.�6��J� �V��@��|���¤��� �!�ų!���(���� � ԅ��’��/� $H{�b";)c;�{���Z���ѥ��ur�:���L�4%��=��m���pJ��. g�Sv�0������{�Cq��0:@s�+�GD�i��(����o/F�’K����w���H1����H�dV�l�;����� �l��uCԎI���xd1�>����d~�t �U1��<<ta�*��Q�’���ԉ��Y�T ��N