SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3
SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-33138US | high7.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver… | ||||
| CVE-2022-33137US | high8.0 | — | ||
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- FixedSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - FixedSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan