Non notée
CVE-2022-33138 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3),…
Description
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC MV540 H | Versions non publiées | |
| SIMATIC MV540 S | Versions non publiées | |
| SIMATIC MV550 H | Versions non publiées | |
| SIMATIC MV550 S | Versions non publiées | |
| SIMATIC MV560 U | Versions non publiées | |
| SIMATIC MV560 X | Versions non publiées |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC MV540 H
Les 8 CVE de SIMATIC MV540 H →
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Non notée
CVE-2023-36521
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
8.6
Élevée
CVE-2023-35921
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
7.5
Élevée
CVE-2023-35920
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
7.5
Élevée