CVE-2022-33137CWE-613

CVE-2022-33137: falha em Siemens SIMATIC MV540 H

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC MV540 H+ Monitorar SIMATIC MV540 S

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.9%
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.
Produtos afetados
Siemens · SIMATIC MV540 HSiemens · SIMATIC MV540 SSiemens · SIMATIC MV550 HSiemens · SIMATIC MV550 SSiemens · SIMATIC MV560 USiemens · SIMATIC MV560 X
CVEs relacionadas — Siemens SIMATIC MV540 H

No mesmo produto, das mais perigosas para as menos.

CVE-2020-28400HIGHCVE-2020-28400EPSS 1.9%CVE-2022-33138—CVE-2022-33138EPSS 1.3%CVE-2023-35921HIGHCVE-2023-35921EPSS 0.9%CVE-2023-35920HIGHCVE-2023-35920EPSS 0.9%CVE-2023-36521HIGHCVE-2023-36521EPSS 0.6%