6.5
Moyenne
CVE-2022-30694 The login endpoint /FormLogin in affected web services does not apply proper origin checking
Description
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF | Versions non publiées | |
| SIMATIC Drive Controller CPU 1507D TF | Versions non publiées | |
| SIMATIC ET 200pro IM154-8 PN/DP CPU | Versions non publiées | |
| SIMATIC ET 200pro IM154-8F PN/DP CPU | Versions non publiées | |
| SIMATIC ET 200pro IM154-8FX PN/DP CPU | Versions non publiées | |
| SIMATIC ET 200S IM151-8 PN/DP CPU | Versions non publiées | |
| SIMATIC ET 200S IM151-8F PN/DP CPU | Versions non publiées | |
| SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | Versions non publiées | |
| SIMATIC PC Station | Versions non publiées |
Afficher les 93 autres branches Masquer les 93 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC Drive Controller CPU 1504D TF
Les 24 CVE de SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Moyenne
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Moyenne
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Moyenne
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critique