CVE-2021-37172CWE-287

CVE-2021-37172: vulnerability in Siemens SIMATIC S7-1200 CPU family (incl.

Published · Updated

Follow this CVE+ Monitor SIMATIC S7-1200 CPU family

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
Affected products
Siemens · SIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Related CVEs — Siemens SIMATIC S7-1200 CPU family (incl.

In the same product, most dangerous first.

CVE-2020-15782CRITICALCVE-2020-15782EPSS 5.2%CVE-2017-12741HIGHCVE-2017-12741EPSS 3.3%CVE-2021-37204HIGHCVE-2021-37204EPSS 2.2%CVE-2019-10936HIGHCVE-2019-10936EPSS 2.1%CVE-2021-37185HIGHCVE-2021-37185EPSS 2.1%CVE-2019-19300HIGHCVE-2019-19300EPSS 1.7%