Non notée
CVE-2021-44222 A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00)
Description
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC eaSie Core Package | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC eaSie Core Package
Les 4 CVE de SIMATIC eaSie Core Package →
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Non notée
CVE-2025-30033
The affected setup component is vulnerable to DLL hijacking
7.8
Élevée
CVE-2021-44221
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00)
Non notée