Non notée
CVE-2021-42029 A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16…
Description
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC STEP 7 (TIA Portal) V15 | Versions non publiées | |
| SIMATIC STEP 7 (TIA Portal) V16 | Versions non publiées | |
| SIMATIC STEP 7 (TIA Portal) V17 | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC STEP 7 (TIA Portal) V15
Les 5 CVE de SIMATIC STEP 7 (TIA Portal) V15 →
CVE-2020-7588
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution…
Non notée
CVE-2020-7581
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution…
Non notée
CVE-2020-7587
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution…
Non notée
CVE-2020-7580
A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All…
Non notée