CVE-2022-33138

🗓️ 12 Jul 2022 10:06:46Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 432 Views

CVE-2022-33138: Unauthenticated access in SIMATIC MV device

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-33138	12 Jul 202210:15	–	attackerkb
Circl	CVE-2022-33138	12 Jul 202214:20	–	circl
CNNVD	Siemens SIMATIC 访问控制错误漏洞	12 Jul 202200:00	–	cnnvd
CNVD	Siemens SIMATIC MV500 Authentication Error Vulnerability	14 Jul 202200:00	–	cnvd
Cvelist	CVE-2022-33138	12 Jul 202210:06	–	cvelist
EUVD	EUVD-2022-36189	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC MV500 Devices	12 Jul 202200:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Jul 202200:00	–	ncsc
NVD	CVE-2022-33138	12 Jul 202210:15	–	nvd
OSV	CVE-2022-33138	12 Jul 202210:15	–	osv

NVD

Node

siemens simatic_mv540_h_firmwareRange<3.3

AND

siemens simatic_mv540_hMatch-

Node

siemens simatic_mv540_s_firmwareRange<3.3

AND

siemens simatic_mv540_sMatch-

Node

siemens simatic_mv550_h_firmwareRange<3.3

AND

siemens simatic_mv550_hMatch-

Node

siemens simatic_mv550_s_firmwareRange<3.3

AND

siemens simatic_mv550_sMatch-

Node

siemens simatic_mv560_u_firmwareRange<3.3

AND

siemens simatic_mv560_uMatch-

Node

siemens simatic_mv560_x_firmwareRange<3.3

AND

siemens simatic_mv560_xMatch-

[
  {
    "product": "SIMATIC MV540 H",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV540 S",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV550 H",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV550 S",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV560 U",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  },
  {
    "product": "SIMATIC MV560 X",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.3"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf

21 Nov 2024 07:07Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.00526

CWE-306