← CVE Intelligence

CVE-2022-33138

Siemens / SIMATIC MV540 H PUBLISHED

Description (CNA)

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Affected (CNA)

Vendor / productVersions
Siemens / SIMATIC MV540 Haffected All versions < V3.3
Siemens / SIMATIC MV540 Saffected All versions < V3.3
Siemens / SIMATIC MV550 Haffected All versions < V3.3
Siemens / SIMATIC MV550 Saffected All versions < V3.3
Siemens / SIMATIC MV560 Uaffected All versions < V3.3
Siemens / SIMATIC MV560 Xaffected All versions < V3.3

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.