Skip to content
fr Sign in
Not rated

CVE-2022-33137 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3),…

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.

Affected products and versions

Product Affected versions Fixed in
SIMATIC MV540 H Versions not published
SIMATIC MV540 S Versions not published
SIMATIC MV550 H Versions not published
SIMATIC MV550 S Versions not published
SIMATIC MV560 U Versions not published
SIMATIC MV560 X Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC MV540 H

The 8 CVEs of SIMATIC MV540 H →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2023-36521 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 8.6 High CVE-2023-35921 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 High CVE-2023-35920 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 High
Track this CVE