Skip to content
fr Sign in
Not rated

CVE-2022-33138 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3),…

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Affected products and versions

Product Affected versions Fixed in
SIMATIC MV540 H Versions not published
SIMATIC MV540 S Versions not published
SIMATIC MV550 H Versions not published
SIMATIC MV550 S Versions not published
SIMATIC MV560 U Versions not published
SIMATIC MV560 X Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC MV540 H

The 8 CVEs of SIMATIC MV540 H →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated CVE-2023-36521 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 8.6 High CVE-2023-35921 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 High CVE-2023-35920 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 High
Track this CVE