CVE-2021-37172
mediumPriorität · verfolgen · 30EPSS 0.009 · 60. PerzentilDEEUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)siemens_psirt
Update to V4.5.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)cisa_csaf_ot
Update to V4.5.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)siemens_psirt
Update to TIA Portal V13 SP1 or any later version before provisioning S7-1200 V4.5.0 devices
- MitigationSIMATIC S7-1200 CPU family (incl. SIPLUS variants)cisa_csaf_ot
Update to TIA Portal V13 SP1 or any later version before provisioning S7-1200 V4.5.0 devices
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.1
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (6)
Betroffene Produkte und Versionsbereiche.
- siemens simatic s7-1200 cpu firmware= 4.5.0nvdUScpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:*:*:*:*:*:*:*:*
- siemens simatic step 7 (tia portal)≤ 13.0nvdUScpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-830194SSA-830194: Missing Authentication Vulnerability in S7-1200 Devices2021-08-10csaf · siemens_psirtDE
SIMATIC S7-1200 PLC, version V4.5.0 fails to authenticate against configured passwords when the affected device was provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. Siemens has released an update for SIMATIC S7-1200 and recommends to update to the latest version.
- ICSA-21-222-09Siemens SIMATIC S7-1200 (Update A)2021-08-10icsa · cisa_csaf_otUS
SIMATIC S7-1200 PLC, version V4.5.0 fails to authenticate against configured passwords when the affected device was provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. Siemens has released an update for SIMATIC S7-1200 and recommends to update to the latest version.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdfcnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-222-09cnnvd
- https://us-cert.cisa.gov/ics/advisories/isca-21-222-09cnnvd
- https://vigilance.fr/vulnerability/SIMATIC-S7-1200-privilege-escalation-via-TIA-Portal-36090cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.2715cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021081103cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdfPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan