CVE-2021-44222: vulnerability in Siemens SIMATIC eaSie Core Package
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system.
Affected products
Siemens · SIMATIC eaSie Core PackageRelated CVEs — Siemens SIMATIC eaSie Core Package
In the same product, most dangerous first.