SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3
SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has released an update for the SIMATIC MV500 devices and recommends to update to the latest version. Note that the update also contains additional fixes for vulnerabilities documented in Siemens Security Advisory SSA-712929.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-33138US | high7.5OT erhöht | — | ||
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver… | ||||
| CVE-2022-33137US | high8.0 | — | ||
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All ver… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- BehobenSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV540 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV540 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV550 H
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV550 S
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV560 U
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/ - BehobenSIMATIC MV560 X
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811878/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan