Vulnerability-Lookup

CVE-2022-33138 (GCVE-0-2022-33138)

Vulnerability from cvelistv5 – Published: 2022-07-12 10:06 – Updated: 2024-08-03 08:01

Summary

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Severity

No CVSS data available.

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

siemens

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_MISC

Impacted products

6 products

Vendor	Product	Version
Siemens	SIMATIC MV540 H	Affected: All versions < V3.3
Siemens	SIMATIC MV540 S	Affected: All versions < V3.3
Siemens	SIMATIC MV550 H	Affected: All versions < V3.3
Siemens	SIMATIC MV550 S	Affected: All versions < V3.3
Siemens	SIMATIC MV560 U	Affected: All versions < V3.3
Siemens	SIMATIC MV560 X	Affected: All versions < V3.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:01:19.531Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIMATIC MV540 H",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        },
        {
          "product": "SIMATIC MV540 S",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        },
        {
          "product": "SIMATIC MV550 H",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        },
        {
          "product": "SIMATIC MV550 S",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        },
        {
          "product": "SIMATIC MV560 U",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        },
        {
          "product": "SIMATIC MV560 X",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306: Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-07-12T10:06:46.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-33138",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIMATIC MV540 H",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIMATIC MV540 S",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIMATIC MV550 H",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIMATIC MV550 S",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIMATIC MV560 U",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIMATIC MV560 X",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V3.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-306: Missing Authentication for Critical Function"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-33138",
    "datePublished": "2022-07-12T10:06:46.000Z",
    "dateReserved": "2022-06-13T00:00:00.000Z",
    "dateUpdated": "2024-08-03T08:01:19.531Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-33138",
      "date": "2026-05-27",
      "epss": "0.00526",
      "percentile": "0.67213"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"A6527D89-4A8F-4A97-B2E9-CFBC9593DEB7\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"18944887-DE3F-4FB4-88D2-1C8EC89A1481\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"0557AB45-C9F1-4F67-BD8D-E5AD706CCACF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B016178-2DCB-417C-B20F-8B9E1904BE8C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"7EFEE0CC-F494-4B57-8DF1-68954C4AA144\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"324A87A6-2DC6-4797-8191-0BE2D8D1F9FC\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"AC4115D9-D589-4EE4-AFC8-D3C103A84DA2\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4B6E1134-8C21-4045-BD02-F44250474C40\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"E9DEAF0E-48DB-4499-835B-96E17B8DD738\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D2FBB8F8-C886-4A2B-8808-6E3D6A57B271\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"99359BFA-BBA9-423F-A12B-1E9AF673CB91\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DAA25C73-59D0-469D-BE6F-6188F645C1D9\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad en SIMATIC MV540 H (Todas las versiones anteriores a V3.3), SIMATIC MV540 S (Todas las versiones anteriores a V3.3), SIMATIC MV550 H (Todas las versiones anteriores a V3.3), SIMATIC MV550 S (Todas las versiones anteriores a V3.3), SIMATIC MV560 U (Todas las versiones anteriores a V3.3), SIMATIC MV560 X (Todas las versiones anteriores a V3.3). Los dispositivos afectados no llevan a cabo la autenticaci\\u00f3n para varios endpoints de la API web. Esto podr\\u00eda permitir a un atacante remoto no autenticado leer y descargar datos del dispositivo\"}]",
      "id": "CVE-2022-33138",
      "lastModified": "2024-11-21T07:07:35.183",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:N/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2022-07-12T10:15:10.757",
      "references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf\", \"source\": \"productcert@siemens.com\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "productcert@siemens.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-306\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-306\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-33138\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2022-07-12T10:15:10.757\",\"lastModified\":\"2024-11-21T07:07:35.183\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SIMATIC MV540 H (Todas las versiones anteriores a V3.3), SIMATIC MV540 S (Todas las versiones anteriores a V3.3), SIMATIC MV550 H (Todas las versiones anteriores a V3.3), SIMATIC MV550 S (Todas las versiones anteriores a V3.3), SIMATIC MV560 U (Todas las versiones anteriores a V3.3), SIMATIC MV560 X (Todas las versiones anteriores a V3.3). Los dispositivos afectados no llevan a cabo la autenticaci\u00f3n para varios endpoints de la API web. Esto podr\u00eda permitir a un atacante remoto no autenticado leer y descargar datos del dispositivo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"A6527D89-4A8F-4A97-B2E9-CFBC9593DEB7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"18944887-DE3F-4FB4-88D2-1C8EC89A1481\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"0557AB45-C9F1-4F67-BD8D-E5AD706CCACF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B016178-2DCB-417C-B20F-8B9E1904BE8C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"7EFEE0CC-F494-4B57-8DF1-68954C4AA144\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"324A87A6-2DC6-4797-8191-0BE2D8D1F9FC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"AC4115D9-D589-4EE4-AFC8-D3C103A84DA2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B6E1134-8C21-4045-BD02-F44250474C40\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"E9DEAF0E-48DB-4499-835B-96E17B8DD738\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2FBB8F8-C886-4A2B-8808-6E3D6A57B271\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"99359BFA-BBA9-423F-A12B-1E9AF673CB91\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAA25C73-59D0-469D-BE6F-6188F645C1D9\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}

CERTFR-2022-AVI-627

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	EN100 Ethernet module PROFINET IO variant toutes versions
Siemens	N/A	SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) toutes versions
Siemens	N/A	EN100 Ethernet module IEC 104 variant toutes versions
Siemens	N/A	EN100 Ethernet module DNP3 IP variant toutes versions
Siemens	N/A	EN100 Ethernet module Modbus TCP variant toutes versions
Siemens	N/A	SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) toutes versions
Siemens	N/A	SICAM GridEdge Essential ARM (6MD7881-2AA30) toutes versions
Siemens	N/A	Parasolid V34.0 versions antérieures à 34.0.250
Siemens	N/A	SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) versions antérieures à 2.0
Siemens	N/A	SICAM GridEdge Essential Intel (6MD7881-2AA40) versions antérieures à 2.7.3
Siemens	N/A	SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) versions antérieures à 2.0
Siemens	N/A	Mendix Applications using Mendix versions 8 antérieures à 8.18.18
Siemens	N/A	Teamcenter Visualization toutes versions 14.0.x
Siemens	N/A	CP-8000 MASTER MODULE WITH I/O -40/+70°C (6MF2101-1AB10-0AA0) versions antérieures à CPC80 V16.30
Siemens	N/A	Disques SINAMICS PERFECT HARMONY GH180 Drives fabriqués depuis 2015 avant 2021
Siemens	N/A	SIMATIC MV550 H (6GF3550-0GE10) versions antérieures à 3.3
Siemens	N/A	JT2Go versions antérieures à 13.3.0.5
Siemens	N/A	SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) versions antérieures à 2.0
Siemens	N/A	Parasolid V33.1 toutes versions
Siemens	N/A	SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) versions antérieures à 2.0
Siemens	N/A	SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits SIMATIC concernés et des correctifs disponibles
Siemens	N/A	SICAM GridEdge Essential with GDS ARM (6MD7881-2AA10) toutes versions
Siemens	N/A	SIMATIC MV540 S (6GF3540-0CD10) versions antérieures à 3.3
Siemens	N/A	SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions antérieures à 3.0.22
Siemens	N/A	Teamcenter Visualization versions 13.3.x antérieures à 13.3.0.5
Siemens	N/A	SIMATIC MV550 S (6GF3550-0CD10) versions antérieures à 3.3
Siemens	N/A	Mendix Applications using Mendix 9 versions supérieures ou égales à 9.11 et antérieures à 9.15
Siemens	N/A	Mendix Excel Importer Module (Mendix 8 compatible) versions antérieures à 9.2.2
Siemens	N/A	EN100 Ethernet module IEC 61850 variant versions antérieures à 4.40
Siemens	N/A	Parasolid V34.1 versions antérieures à 34.1.233
Siemens	N/A	Mendix Applications using Mendix versions 9 (9.12) antérieures à 9.12.2
Siemens	N/A	CP-8000 MASTER MODULE WITH I/O -25/+70°C (6MF2101-0AB10-0AA0) versions antérieures à CPC80 V16.30
Siemens	N/A	SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) versions antérieures à 22.00
Siemens	N/A	Simcenter Femap toutes versions
Siemens	N/A	SIMATIC MV560 U (6GF3560-0LE10) versions antérieures à 3.3
Siemens	N/A	CP-8021 MASTER MODULE (6MF2802-1AA00) versions antérieures à CPC80 V16.30
Siemens	N/A	CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00) versions antérieures à CPC80 V16.30
Siemens	N/A	Mendix Applications using Mendix versions 9 antérieures à 9.14.0
Siemens	N/A	SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) à SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) toutes versions
Siemens	N/A	SIMATIC MV560 X (6GF3560-0HE10) versions antérieures à 3.3
Siemens	N/A	RUGGEDCOM ROS toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits RUGGEDCOM concernés et des correctifs disponibles
Siemens	N/A	Teamcenter Visualization V12.4 toutes versions
Siemens	N/A	SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) à SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits SCALANCE concernés et des correctifs disponibles
Siemens	N/A	Teamcenter Visualization V14.0 toutes versions
Siemens	N/A	SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) versions antérieures à 2.0
Siemens	N/A	Opcenter Quality versions 13.1 antérieures à 13.1.20220624
Siemens	N/A	SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) versions antérieures à 3.0.22
Siemens	N/A	Mendix Applications using Mendix versions 9 (9.6) antérieures à 9.6.12
Siemens	N/A	Teamcenter Visualization V13.2 toutes versions
Siemens	N/A	Opcenter Quality versions 13.2 antérieures à 13.2.20220624
Siemens	N/A	SIMATIC MV540 H (6GF3540-0GE10) versions antérieures à 3.3
Siemens	N/A	PADS Standard/Plus Viewer toutes versions
Siemens	N/A	Mendix Applications using Mendix 9 versions 9.12 antérieure à 9.12.3
Siemens	N/A	Simcenter Femap versions antérieures à 2022.2
Siemens	N/A	Mendix Excel Importer Module (Mendix 9 compatible) versions antérieures à 10.1.2
Siemens	N/A	Mendix Applications using Mendix versions 7 antérieures à 7.23.31
Siemens	N/A	RUGGEDCOM ROX MX5000 à RX5000 versions antérieures à 2.15.1
Siemens	N/A	SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) versions antérieures à 2.7.3

References

Title

Publication Time

CERTFR-2022-AVI-627

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	EN100 Ethernet module PROFINET IO variant toutes versions
Siemens	N/A	SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) toutes versions
Siemens	N/A	EN100 Ethernet module IEC 104 variant toutes versions
Siemens	N/A	EN100 Ethernet module DNP3 IP variant toutes versions
Siemens	N/A	EN100 Ethernet module Modbus TCP variant toutes versions
Siemens	N/A	SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) toutes versions
Siemens	N/A	SICAM GridEdge Essential ARM (6MD7881-2AA30) toutes versions
Siemens	N/A	Parasolid V34.0 versions antérieures à 34.0.250
Siemens	N/A	SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) versions antérieures à 2.0
Siemens	N/A	SICAM GridEdge Essential Intel (6MD7881-2AA40) versions antérieures à 2.7.3
Siemens	N/A	SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) versions antérieures à 2.0
Siemens	N/A	Mendix Applications using Mendix versions 8 antérieures à 8.18.18
Siemens	N/A	Teamcenter Visualization toutes versions 14.0.x
Siemens	N/A	CP-8000 MASTER MODULE WITH I/O -40/+70°C (6MF2101-1AB10-0AA0) versions antérieures à CPC80 V16.30
Siemens	N/A	Disques SINAMICS PERFECT HARMONY GH180 Drives fabriqués depuis 2015 avant 2021
Siemens	N/A	SIMATIC MV550 H (6GF3550-0GE10) versions antérieures à 3.3
Siemens	N/A	JT2Go versions antérieures à 13.3.0.5
Siemens	N/A	SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) versions antérieures à 2.0
Siemens	N/A	Parasolid V33.1 toutes versions
Siemens	N/A	SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) versions antérieures à 2.0
Siemens	N/A	SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits SIMATIC concernés et des correctifs disponibles
Siemens	N/A	SICAM GridEdge Essential with GDS ARM (6MD7881-2AA10) toutes versions
Siemens	N/A	SIMATIC MV540 S (6GF3540-0CD10) versions antérieures à 3.3
Siemens	N/A	SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) versions antérieures à 3.0.22
Siemens	N/A	Teamcenter Visualization versions 13.3.x antérieures à 13.3.0.5
Siemens	N/A	SIMATIC MV550 S (6GF3550-0CD10) versions antérieures à 3.3
Siemens	N/A	Mendix Applications using Mendix 9 versions supérieures ou égales à 9.11 et antérieures à 9.15
Siemens	N/A	Mendix Excel Importer Module (Mendix 8 compatible) versions antérieures à 9.2.2
Siemens	N/A	EN100 Ethernet module IEC 61850 variant versions antérieures à 4.40
Siemens	N/A	Parasolid V34.1 versions antérieures à 34.1.233
Siemens	N/A	Mendix Applications using Mendix versions 9 (9.12) antérieures à 9.12.2
Siemens	N/A	CP-8000 MASTER MODULE WITH I/O -25/+70°C (6MF2101-0AB10-0AA0) versions antérieures à CPC80 V16.30
Siemens	N/A	SIMATIC eaSie Core Package (6DL5424-0AX00-0AV8) versions antérieures à 22.00
Siemens	N/A	Simcenter Femap toutes versions
Siemens	N/A	SIMATIC MV560 U (6GF3560-0LE10) versions antérieures à 3.3
Siemens	N/A	CP-8021 MASTER MODULE (6MF2802-1AA00) versions antérieures à CPC80 V16.30
Siemens	N/A	CP-8022 MASTER MODULE WITH GPRS (6MF2802-2AA00) versions antérieures à CPC80 V16.30
Siemens	N/A	Mendix Applications using Mendix versions 9 antérieures à 9.14.0
Siemens	N/A	SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) à SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) toutes versions
Siemens	N/A	SIMATIC MV560 X (6GF3560-0HE10) versions antérieures à 3.3
Siemens	N/A	RUGGEDCOM ROS toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits RUGGEDCOM concernés et des correctifs disponibles
Siemens	N/A	Teamcenter Visualization V12.4 toutes versions
Siemens	N/A	SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) à SCALANCE X200-4P IRT (6GK5200-4AH00-2BA3) toutes versions : Se référer à l'avis éditeur pour la liste exacte des produits SCALANCE concernés et des correctifs disponibles
Siemens	N/A	Teamcenter Visualization V14.0 toutes versions
Siemens	N/A	SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) versions antérieures à 2.0
Siemens	N/A	Opcenter Quality versions 13.1 antérieures à 13.1.20220624
Siemens	N/A	SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) versions antérieures à 3.0.22
Siemens	N/A	Mendix Applications using Mendix versions 9 (9.6) antérieures à 9.6.12
Siemens	N/A	Teamcenter Visualization V13.2 toutes versions
Siemens	N/A	Opcenter Quality versions 13.2 antérieures à 13.2.20220624
Siemens	N/A	SIMATIC MV540 H (6GF3540-0GE10) versions antérieures à 3.3
Siemens	N/A	PADS Standard/Plus Viewer toutes versions
Siemens	N/A	Mendix Applications using Mendix 9 versions 9.12 antérieure à 9.12.3
Siemens	N/A	Simcenter Femap versions antérieures à 2022.2
Siemens	N/A	Mendix Excel Importer Module (Mendix 9 compatible) versions antérieures à 10.1.2
Siemens	N/A	Mendix Applications using Mendix versions 7 antérieures à 7.23.31
Siemens	N/A	RUGGEDCOM ROX MX5000 à RX5000 versions antérieures à 2.15.1
Siemens	N/A	SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) versions antérieures à 2.7.3

References

Title

Publication Time

CNVD-2022-51436

Vulnerability from cnvd - Published: 2022-07-14

Title

Siemens SIMATIC MV500身份验证错误漏洞

Description

SIMATIC MV500是固定式光学阅读器，用于可靠地采集各种不同表面上的印刷、激光、钻孔、打孔和点印代码。 Siemens SIMATIC MV500存在身份验证错误漏洞，未经身份验证的远程攻击者可利用该漏洞从设备读取和下载数据。

Severity

高

Patch Name

Siemens SIMATIC MV500身份验证错误漏洞的补丁

Patch Description

SIMATIC MV500是固定式光学阅读器，用于可靠地采集各种不同表面上的印刷、激光、钻孔、打孔和点印代码。 Siemens SIMATIC MV500存在身份验证错误漏洞，未经身份验证的远程攻击者可利用该漏洞从设备读取和下载数据。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-348662.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-348662.html

Impacted products

Name
['Siemens SIMATIC MV550 H (6GF3550-0GE10) <3.3', 'Siemens SIMATIC MV550 S (6GF3550-0CD10) <3.3', 'Siemens SIMATIC MV560 U (6GF3560-0LE10) <3.3', 'Siemens SIMATIC MV560 X (6GF3560-0HE10) <3.3', 'Siemens SIMATIC MV540 H (6GF3540-0GE10) <3.3', 'Siemens SIMATIC MV540 S (6GF3540-0CD10) <3.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-33138"
    }
  },
  "description": "SIMATIC MV500\u662f\u56fa\u5b9a\u5f0f\u5149\u5b66\u9605\u8bfb\u5668\uff0c\u7528\u4e8e\u53ef\u9760\u5730\u91c7\u96c6\u5404\u79cd\u4e0d\u540c\u8868\u9762\u4e0a\u7684\u5370\u5237\u3001\u6fc0\u5149\u3001\u94bb\u5b54\u3001\u6253\u5b54\u548c\u70b9\u5370\u4ee3\u7801\u3002\n\nSiemens SIMATIC MV500\u5b58\u5728\u8eab\u4efd\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ece\u8bbe\u5907\u8bfb\u53d6\u548c\u4e0b\u8f7d\u6570\u636e\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-348662.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-51436",
  "openTime": "2022-07-14",
  "patchDescription": "SIMATIC MV500\u662f\u56fa\u5b9a\u5f0f\u5149\u5b66\u9605\u8bfb\u5668\uff0c\u7528\u4e8e\u53ef\u9760\u5730\u91c7\u96c6\u5404\u79cd\u4e0d\u540c\u8868\u9762\u4e0a\u7684\u5370\u5237\u3001\u6fc0\u5149\u3001\u94bb\u5b54\u3001\u6253\u5b54\u548c\u70b9\u5370\u4ee3\u7801\u3002\r\n\r\nSiemens SIMATIC MV500\u5b58\u5728\u8eab\u4efd\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ece\u8bbe\u5907\u8bfb\u53d6\u548c\u4e0b\u8f7d\u6570\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SIMATIC MV500\u8eab\u4efd\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC MV550 H (6GF3550-0GE10) \u003c3.3",
      "Siemens SIMATIC MV550 S (6GF3550-0CD10) \u003c3.3",
      "Siemens SIMATIC MV560 U (6GF3560-0LE10) \u003c3.3",
      "Siemens SIMATIC MV560 X (6GF3560-0HE10) \u003c3.3",
      "Siemens SIMATIC MV540 H (6GF3540-0GE10) \u003c3.3",
      "Siemens SIMATIC MV540 S (6GF3540-0CD10) \u003c3.3"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-348662.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-07-14",
  "title": "Siemens SIMATIC MV500\u8eab\u4efd\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

FKIE_CVE-2022-33138

Vulnerability from fkie_nvd - Published: 2022-07-12 10:15 - Updated: 2024-11-21 07:07

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

References

	URL	Tags
	productcert@siemens.com	https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
siemens	simatic_mv540_h_firmware	*
siemens	simatic_mv540_h	-
siemens	simatic_mv540_s_firmware	*
siemens	simatic_mv540_s	-
siemens	simatic_mv550_h_firmware	*
siemens	simatic_mv550_h	-
siemens	simatic_mv550_s_firmware	*
siemens	simatic_mv550_s	-
siemens	simatic_mv560_u_firmware	*
siemens	simatic_mv560_u	-
siemens	simatic_mv560_x_firmware	*
siemens	simatic_mv560_x	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6527D89-4A8F-4A97-B2E9-CFBC9593DEB7",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "18944887-DE3F-4FB4-88D2-1C8EC89A1481",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0557AB45-C9F1-4F67-BD8D-E5AD706CCACF",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B016178-2DCB-417C-B20F-8B9E1904BE8C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EFEE0CC-F494-4B57-8DF1-68954C4AA144",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "324A87A6-2DC6-4797-8191-0BE2D8D1F9FC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC4115D9-D589-4EE4-AFC8-D3C103A84DA2",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B6E1134-8C21-4045-BD02-F44250474C40",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9DEAF0E-48DB-4499-835B-96E17B8DD738",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2FBB8F8-C886-4A2B-8808-6E3D6A57B271",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99359BFA-BBA9-423F-A12B-1E9AF673CB91",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAA25C73-59D0-469D-BE6F-6188F645C1D9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en SIMATIC MV540 H (Todas las versiones anteriores a V3.3), SIMATIC MV540 S (Todas las versiones anteriores a V3.3), SIMATIC MV550 H (Todas las versiones anteriores a V3.3), SIMATIC MV550 S (Todas las versiones anteriores a V3.3), SIMATIC MV560 U (Todas las versiones anteriores a V3.3), SIMATIC MV560 X (Todas las versiones anteriores a V3.3). Los dispositivos afectados no llevan a cabo la autenticaci\u00f3n para varios endpoints de la API web. Esto podr\u00eda permitir a un atacante remoto no autenticado leer y descargar datos del dispositivo"
    }
  ],
  "id": "CVE-2022-33138",
  "lastModified": "2024-11-21T07:07:35.183",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-07-12T10:15:10.757",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-C482-89C3-CCMP

Vulnerability from github – Published: 2022-07-13 00:01 – Updated: 2022-07-16 00:00

Details

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-33138"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-306"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-07-12T10:15:00Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.",
  "id": "GHSA-c482-89c3-ccmp",
  "modified": "2022-07-16T00:00:23Z",
  "published": "2022-07-13T00:01:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-33138"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-33138

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-33138

Aliases

CVE-2022-33138

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-33138",
    "description": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.",
    "id": "GSD-2022-33138"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-33138"
      ],
      "details": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.",
      "id": "GSD-2022-33138",
      "modified": "2023-12-13T01:19:24.244202Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "productcert@siemens.com",
        "ID": "CVE-2022-33138",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "SIMATIC MV540 H",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC MV540 S",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC MV550 H",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC MV550 S",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC MV560 U",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC MV560 X",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Siemens"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-306: Missing Authentication for Critical Function"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf",
            "refsource": "MISC",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-33138"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-306"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "N/A",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-07-15T17:31Z",
      "publishedDate": "2022-07-12T10:15Z"
    }
  }
}

ICSA-22-195-03

Vulnerability from csaf_cisa - Published: 2022-07-12 00:00 - Updated: 2022-07-12 00:00

Summary

Siemens SIMATIC MV500 Devices

Notes

Summary: SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.

General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.

Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Advisory Conversion Disclaimer: This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.

Critical infrastructure sectors: Multiple

Countries/areas deployed: Worldwide

Company headquarters location: Germany

Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

Recommended Practices: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.

Recommended Practices: Locate control system networks and remote devices behind firewalls and isolate them from business networks.

Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

CVE-2022-33137

8.0 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-613 - Insufficient Session Expiration

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SIMATIC MV540 H Siemens / SIMATIC MV540 H	`6GF3540-0GE10`	<V3.3	Vendor Fix fix
SIMATIC MV540 S Siemens / SIMATIC MV540 S	`6GF3540-0CD10`	<V3.3	Vendor Fix fix
SIMATIC MV550 H Siemens / SIMATIC MV550 H	`6GF3550-0GE10`	<V3.3	Vendor Fix fix
SIMATIC MV550 S Siemens / SIMATIC MV550 S	`6GF3550-0CD10`	<V3.3	Vendor Fix fix
SIMATIC MV560 U Siemens / SIMATIC MV560 U	`6GF3560-0LE10`	<V3.3	Vendor Fix fix
SIMATIC MV560 X Siemens / SIMATIC MV560 X	`6GF3560-0HE10`	<V3.3	Vendor Fix fix

CVE-2022-33138

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SIMATIC MV540 H Siemens / SIMATIC MV540 H	`6GF3540-0GE10`	<V3.3	Vendor Fix fix
SIMATIC MV540 S Siemens / SIMATIC MV540 S	`6GF3540-0CD10`	<V3.3	Vendor Fix fix
SIMATIC MV550 H Siemens / SIMATIC MV550 H	`6GF3550-0GE10`	<V3.3	Vendor Fix fix
SIMATIC MV550 S Siemens / SIMATIC MV550 S	`6GF3550-0CD10`	<V3.3	Vendor Fix fix
SIMATIC MV560 U Siemens / SIMATIC MV560 U	`6GF3560-0LE10`	<V3.3	Vendor Fix fix
SIMATIC MV560 X Siemens / SIMATIC MV560 X	`6GF3560-0HE10`	<V3.3	Vendor Fix fix

References

11 references

URL	Category
https://cert-portal.siemens.com/productcert/csaf/…	self
https://cert-portal.siemens.com/productcert/txt/s…	self
https://cert-portal.siemens.com/productcert/pdf/s…	self
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://us-cert.cisa.gov/sites/default/files/reco…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B	external

Acknowledgments

Siemens ProductCERT

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens ProductCERT",
        "summary": "reporting these vulnerabilities to CISA."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "notes": [
      {
        "category": "summary",
        "text": "SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users\u0027 web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138).\n\nSiemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
        "title": "Advisory Conversion Disclaimer"
      },
      {
        "category": "other",
        "text": "Multiple",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-348662.json"
      },
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-348662.txt"
      },
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-195-03 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-195-03.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-22-195-03 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-22-195-03"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens SIMATIC MV500 Devices",
    "tracking": {
      "current_release_date": "2022-07-12T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-22-195-03",
      "initial_release_date": "2022-07-12T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2022-07-12T00:00:00.000000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV540 H",
                  "product_id": "CSAFPID-0001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3540-0GE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV540 H"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV540 S",
                  "product_id": "CSAFPID-0002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3540-0CD10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV540 S"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV550 H",
                  "product_id": "CSAFPID-0003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3550-0GE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV550 H"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV550 S",
                  "product_id": "CSAFPID-0004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3550-0CD10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV550 S"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV560 U",
                  "product_id": "CSAFPID-0005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3560-0LE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV560 U"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC MV560 X",
                  "product_id": "CSAFPID-0006",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3560-0HE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV560 X"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-33137",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users\u0027 sessions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811878/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ]
        }
      ],
      "title": "CVE-2022-33137"
    },
    {
      "cve": "CVE-2022-33138",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811878/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ]
        }
      ],
      "title": "CVE-2022-33138"
    }
  ]
}

SSA-348662

Vulnerability from csaf_siemens - Published: 2022-07-12 00:00 - Updated: 2022-07-12 00:00

Summary

SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3

Notes

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

CVE-2022-33137

8.0 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-613 - Insufficient Session Expiration

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SIMATIC MV540 H Siemens / SIMATIC MV540 H	`6GF3540-0GE10`	< V3.3	Vendor Fix fix
SIMATIC MV540 S Siemens / SIMATIC MV540 S	`6GF3540-0CD10`	< V3.3	Vendor Fix fix
SIMATIC MV550 H Siemens / SIMATIC MV550 H	`6GF3550-0GE10`	< V3.3	Vendor Fix fix
SIMATIC MV550 S Siemens / SIMATIC MV550 S	`6GF3550-0CD10`	< V3.3	Vendor Fix fix
SIMATIC MV560 U Siemens / SIMATIC MV560 U	`6GF3560-0LE10`	< V3.3	Vendor Fix fix
SIMATIC MV560 X Siemens / SIMATIC MV560 X	`6GF3560-0HE10`	< V3.3	Vendor Fix fix

CVE-2022-33138

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE-306 - Missing Authentication for Critical Function

Affected products

Known affected 6 products

Product	Identifier	Version	Remediation
SIMATIC MV540 H Siemens / SIMATIC MV540 H	`6GF3540-0GE10`	< V3.3	Vendor Fix fix
SIMATIC MV540 S Siemens / SIMATIC MV540 S	`6GF3540-0CD10`	< V3.3	Vendor Fix fix
SIMATIC MV550 H Siemens / SIMATIC MV550 H	`6GF3550-0GE10`	< V3.3	Vendor Fix fix
SIMATIC MV550 S Siemens / SIMATIC MV550 S	`6GF3550-0CD10`	< V3.3	Vendor Fix fix
SIMATIC MV560 U Siemens / SIMATIC MV560 U	`6GF3560-0LE10`	< V3.3	Vendor Fix fix
SIMATIC MV560 X Siemens / SIMATIC MV560 X	`6GF3560-0HE10`	< V3.3	Vendor Fix fix

References

3 references

URL	Category
https://cert-portal.siemens.com/productcert/pdf/s…	self
https://cert-portal.siemens.com/productcert/txt/s…	self
https://cert-portal.siemens.com/productcert/csaf/…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited.",
      "tlp": {
        "label": "WHITE"
      }
    },
    "notes": [
      {
        "category": "summary",
        "text": "SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users\u0027 web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138).\n\nSiemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - PDF Version",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf"
      },
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - TXT Version",
        "url": "https://cert-portal.siemens.com/productcert/txt/ssa-348662.txt"
      },
      {
        "category": "self",
        "summary": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3 - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-348662.json"
      }
    ],
    "title": "SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3",
    "tracking": {
      "current_release_date": "2022-07-12T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-348662",
      "initial_release_date": "2022-07-12T00:00:00Z",
      "revision_history": [
        {
          "date": "2022-07-12T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV540 H",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3540-0GE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV540 H"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV540 S",
                  "product_id": "2",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3540-0CD10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV540 S"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV550 H",
                  "product_id": "3",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3550-0GE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV550 H"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV550 S",
                  "product_id": "4",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3550-0CD10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV550 S"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV560 U",
                  "product_id": "5",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3560-0LE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV560 U"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c V3.3",
                "product": {
                  "name": "SIMATIC MV560 X",
                  "product_id": "6",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GF3560-0HE10"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC MV560 X"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-33137",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users\u0027 sessions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811878/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6"
          ]
        }
      ],
      "title": "CVE-2022-33137"
    },
    {
      "cve": "CVE-2022-33138",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "category": "summary",
          "text": "Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109811878/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6"
          ]
        }
      ],
      "title": "CVE-2022-33138"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-33138 (GCVE-0-2022-33138)

Solution

Solution

Tags

Sightings

Nomenclature