Aller au contenu
en Se connecter
Non notée

CVE-2022-33137 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3),…

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC MV540 H Versions non publiées
SIMATIC MV540 S Versions non publiées
SIMATIC MV550 H Versions non publiées
SIMATIC MV550 S Versions non publiées
SIMATIC MV560 U Versions non publiées
SIMATIC MV560 X Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC MV540 H

Les 8 CVE de SIMATIC MV540 H →
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée CVE-2023-36521 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 8.6 Élevée CVE-2023-35921 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 Élevée CVE-2023-35920 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),… 7.5 Élevée
Suivre cette CVE