CVE-2016-9154

N/A

Published: December 23, 2016 at 05:00 AM UTC

Updated: June 17, 2026 at 12:55 AM UTC

12 products affected across 1 vendorDesigo Web Module Pxa40-w2 FirmwareDesigo Web Module Pxa40-w1 FirmwareDesigo Web Module Pxa30-w2 Firmware

Using Desigo PX Web modules with all firmware versions < V6.00.046 by N/A?

Get instant alerts when new vulnerabilities affect Desigo PX Web modules with all firmware versions < V6.00.046 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 1%

Description

Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) and Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 for Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U (All firmware versions < V6.00.046) use a pseudo random number generator with insufficient entropy to generate certificates for HTTPS, potentially allowing remote attackers to reconstruct the corresponding private key.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Desigo Web Module Pxa30-w0 Firmware · Siemens

95%

v ≤ 6.00.00

siemens-desigo-web-module-pxa30-w0 (same device) · siemens-desigo-web-module-pxa30-w1 (same device) · siemens-desigo-web-module-pxa30-w2 (same device) · siemens-desigo-web-module-pxa40-w0 (same device) · siemens-desigo-web-module-pxa40-w1 (same device) · siemens-desigo-web-module-pxa40-w2 (same device)

Desigo Web Module Pxa30-w1 Firmware · Siemens

95%

v ≤ 6.00.00

Desigo Web Module Pxa30-w2 Firmware · Siemens

95%

v ≤ 6.00.00

Desigo Web Module Pxa40-w0 Firmware · Siemens

95%

v ≤ 6.00.00

Desigo Web Module Pxa40-w1 Firmware · Siemens

95%

v ≤ 6.00.00