ICSA-22-195-03

Siemens SIMATIC MV500 Devices

view advisory published 2022-07-12

SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-33138US	high7.5OT elevated	1.35% (71st)	—	2022-07-12
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver…
CVE-2022-33137US	high8.0	0.86% (58th)	—	2022-07-12
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver…

references

External citations — patches, advisories, analysis.

remediations (12)

FixedSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
FixedSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan