← CVE Intelligence

CVE-2022-33137

Siemens / SIMATIC MV540 H PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC MV540 Haffected All versions < V3.3
Siemens / SIMATIC MV540 Saffected All versions < V3.3
Siemens / SIMATIC MV550 Haffected All versions < V3.3
Siemens / SIMATIC MV550 Saffected All versions < V3.3
Siemens / SIMATIC MV560 Uaffected All versions < V3.3
Siemens / SIMATIC MV560 Xaffected All versions < V3.3

CWE

CWE-613

References

ADP enrichment

CVE

No English description supplied.