CVE-2022-44725

highpriority · track · 31EPSS 0.002 · 8 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.18% (8th) EPSS

CVSS 7.8 · high

Is it mine?

53 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedTeleControl Server Basic V3siemens_psirt
Update to V3.1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955177/
FixedSIMATIC NET PC Software V16siemens_psirt
Update to V16 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974091/
FixedSIMATIC NET PC Software V17siemens_psirt
Update to V17 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820674/
FixedSIMATIC NET PC Software V18siemens_psirt
Update to V18 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826242/
FixedSIMATIC Process Historian 2022 OPC UA Serversiemens_psirt
In the context of SIMATIC PCS neo, update to SIMATIC PCS neo V4.1 or later version
FixedSIMATIC WinCCsiemens_psirt
Update to V8.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816599/
FixedSIMATIC WinCC Runtime Professionalsiemens_psirt
Update to V18 Update 2 or later version
FixedSIMATIC WinCC Unified PC Runtime V18siemens_psirt
Update to V18.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807123/
FixedSIMATIC NET PC Software V16cisa_csaf_ot
Update to V16 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974091/
FixedSIMATIC NET PC Software V17cisa_csaf_ot
Update to V17 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808270/
FixedSIMATIC NET PC Software V18cisa_csaf_ot
Update to V18 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826242/
FixedSIMATIC Process Historian 2022 OPC UA Servercisa_csaf_ot
In the context of SIMATIC PCS neo, update to SIMATIC PCS neo V4.1 or later version
FixedSIMATIC WinCCcisa_csaf_ot
Update to V8.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109816599/
FixedSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Update to V18 Update 2 or later version
FixedSIMATIC WinCC Unified PC Runtime V18cisa_csaf_ot
Update to V18.0 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807123/
FixedTeleControl Server Basic V3cisa_csaf_ot
Update to V3.1.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955177/
FixedSIMATIC NET PC Software V17cisa_csaf_ot
Update to V17 SP1 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109820674/
MitigationOpenPCS 7 V9.1siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V14siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V15siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V16siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V17siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V18siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC Process Historian 2020 OPC UA Serversiemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC Process Historian 2022 OPC UA Serversiemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCCsiemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCC Runtime Professionalsiemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCC Unified PC Runtime V18siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationTeleControl Server Basic V3siemens_psirt
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationOpenPCS 7 V9.1cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC NET PC Software V14cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC NET PC Software V15cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC NET PC Software V16cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC NET PC Software V17cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC NET PC Software V18cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC Process Historian 2020 OPC UA Servercisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC Process Historian 2022 OPC UA Servercisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC WinCCcisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationSIMATIC WinCC Unified PC Runtime V18cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationTeleControl Server Basic V3cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to V1.04.405 or later if possible
MitigationOpenPCS 7 V9.1cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V14cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V15cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V16cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V17cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC NET PC Software V18cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC Process Historian 2020 OPC UA Servercisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC Process Historian 2022 OPC UA Servercisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCCcisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCC Runtime Professionalcisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationSIMATIC WinCC Unified PC Runtime V18cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
MitigationTeleControl Server Basic V3cisa_csaf_ot
Update the underlying OPC Foundation Unified Architecture Local Discovery Server (UA-LDS) to [V1.04.405](https://opcfoundation.org/developer-tools/samples-and-tools-unified-architecture/local-discovery-server-lds/) or later if possible
No fix plannedOpenPCS 7 V9.1siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC NET PC Software V14siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC NET PC Software V15siemens_psirt
Currently no fix is planned
No fix plannedSIMATIC Process Historian 2020 OPC UA Serversiemens_psirt
Currently no fix is planned
No fix plannedOpenPCS 7 V9.1cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC NET PC Software V14cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC NET PC Software V15cisa_csaf_ot
Currently no fix is planned
No fix plannedSIMATIC Process Historian 2020 OPC UA Servercisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.17.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-732USprimaryCWE-20USCWE-20USCWE-732US

affected products (53)

Products and version ranges known to be affected.

OpenPCS 7 V9.1all versionscisa_csaf_otUS
SIMATIC NET PC Software V14all versionscisa_csaf_otUS
SIMATIC NET PC Software V15all versionscisa_csaf_otUS
SIMATIC NET PC Software V16all versionscisa_csaf_otUS
SIMATIC NET PC Software V17all versionscisa_csaf_otUS
SIMATIC NET PC Software V18all versionscisa_csaf_otUS
SIMATIC Process Historian 2020 OPC UA Serverall versionscisa_csaf_otUS
SIMATIC Process Historian 2022 OPC UA Serverall versionscisa_csaf_otUS
SIMATIC WinCCall versionscisa_csaf_otUS
SIMATIC WinCC Runtime Professionalall versionscisa_csaf_otUS
SIMATIC WinCC Unified PC Runtime V18all versionscisa_csaf_otUS
TeleControl Server Basic V3all versionscisa_csaf_otUS
Siemens OpenPCS 7 V9.1≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC NET PC Software V14≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC NET PC Software V15≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC NET PC Software V16< V16_Update_8cisa_csaf_otUS
Siemens SIMATIC NET PC Software V17< V17_SP1cisa_csaf_otUS
Siemens SIMATIC NET PC Software V17< V17_SP1_Update_1cisa_csaf_otUS
Siemens SIMATIC NET PC Software V18< V18_Update_1cisa_csaf_otUS
Siemens SIMATIC Process Historian 2020 OPC UA Server≤ vers:all/*cisa_csaf_otUS

showing 20 of 53

advisories (4)

Vendor and ecosystem advisories describing this.

SSA-556635SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.02024-04-09csaf · siemens_psirtDE
Siemens has released a new version for Telecontrol Server Basic that fixes multiple vulnerabilities.
SSA-691715SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products2023-04-11csaf · siemens_psirtDE
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-23-103-03Siemens in OPC Foundation Local Discovery Server2023-04-11icsa · cisa_csaf_otUS
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-24-102-08Siemens OPC Foundation Local Discovery Server Affecting Siemens Products2023-04-11icsa · cisa_csaf_otUS
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2022-11-17modified 2026-06-17

related (1,935)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2022-22960US	high7.8OT critical	35.5% (98th)	KEV	2022-04-13
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor…
CVE-2021-23874US	high7.8OT critical	1.03% (63rd)	KEV	2021-02-10
Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP…
CVE-2019-15752US	high7.8OT critical	48.6% (99th)	KEV	2019-08-28
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\ve…
CVE-2018-13374US	medium4.3OT critical	38.1% (99th)	KEV	2019-01-22
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials co…
CVE-2021-25646US	high8.8	99.1% (100th)	Exploit	2021-01-29
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments,…

+1930 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan