nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-52334 CVE-2024-52334
MEDIUM
Siemens syngo.plaza VB30E Weak Password Encoding Vulnerability
Record summary
CVE-2024-52334 has a selected CVSS score of 6.3 (medium).
Description
A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 10, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
syngo.plaza VB30EBrowse Siemens / syngo.plaza VB30EDefault status: unknown | CVE List | Before VB30E_HF07 | affected |
References
2siemens-healthineers.com
https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-016040