SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal)
view advisory published 2023-12-12
Siemens has released a new version of STEP 7 (TIA Portal) that fixes an information disclosure vulnerability. A local attacker could gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-46141US | medium5.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - CSAF Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - HTML Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - PDF Versionself
- SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) - TXT Versionself
03
remediations (1)
- FixedSIMATIC STEP 7 (TIA Portal)
Update to V19 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan