CVE-2022-33138CWE-306

CVE-2022-33138: falha em Siemens SIMATIC MV540 H

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC MV540 H+ Monitorar SIMATIC MV540 S

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.3%
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.
Produtos afetados
Siemens · SIMATIC MV540 HSiemens · SIMATIC MV540 SSiemens · SIMATIC MV550 HSiemens · SIMATIC MV550 SSiemens · SIMATIC MV560 USiemens · SIMATIC MV560 X
CVEs relacionadas — Siemens SIMATIC MV540 H

No mesmo produto, das mais perigosas para as menos.

CVE-2020-28400HIGHCVE-2020-28400EPSS 1.9%CVE-2023-35921HIGHCVE-2023-35921EPSS 0.9%CVE-2023-35920HIGHCVE-2023-35920EPSS 0.9%CVE-2022-33137—CVE-2022-33137EPSS 0.9%CVE-2023-36521HIGHCVE-2023-36521EPSS 0.6%