CVE-2022-40181

CVE-2022-40181 is a high-severity vulnerability affecting multiple Siemens Desigo PXM and PXG3 series devices, where the embedded browser fails to restrict interaction with alternative URI schemes. A remote, low-privileged attacker can exploit this by redirecting users to malicious resources, enabling them to read arbitrary files, execute JavaScript for data manipulation, or trigger denial-of-service conditions. With a CVSS score of 8.3, the attack requires low privileges and no user interaction, posing a significant risk to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.