CVE-2022-33137

🗓️ 12 Jul 2022 10:06:44Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 65 Views

Vulnerability in SIMATIC MV540 H, MV540 S, MV550 H, MV550 S, MV560 U, MV560 X < V3.3 allows session hijacking

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-33137	12 Jul 202210:15	–	attackerkb
CNNVD	Siemens SIMATIC 代码问题漏洞	12 Jul 202200:00	–	cnnvd
CNVD	Siemens SIMATIC MV500 has an unspecified vulnerability	14 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-33137	12 Jul 202210:06	–	cvelist
EUVD	EUVD-2022-36188	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC MV500 Devices	12 Jul 202200:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Jul 202200:00	–	ncsc
NVD	CVE-2022-33137	12 Jul 202210:15	–	nvd
OSV	CVE-2022-33137	12 Jul 202210:15	–	osv
Prion	Design/Logic Flaw	12 Jul 202210:15	–	prion

NVD

Node

siemens simatic_mv540_h_firmwareRange<3.3

AND

siemens simatic_mv540_hMatch-

Node

siemens simatic_mv540_s_firmwareRange<3.3

AND

siemens simatic_mv540_sMatch-

Node

siemens simatic_mv550_h_firmwareRange<3.3

AND

siemens simatic_mv550_hMatch-

Node

siemens simatic_mv550_s_firmwareRange<3.3

AND

siemens simatic_mv550_sMatch-

Node

siemens simatic_mv560_u_firmwareRange<3.3

AND

siemens simatic_mv560_uMatch-

Node

siemens simatic_mv560_x_firmwareRange<3.3

AND

siemens simatic_mv560_xMatch-

[
  {
    "product": "SIMATIC MV540 H",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV540 S",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV550 H",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV550 S",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV560 U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV560 X",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf

21 Nov 2024 07:07Current

7.5High risk

Vulners AI Score7.5

CVSS 26

CVSS 3.18

EPSS0.00329

CWE-613