Lucene search
SiemensCVELIST:CVE-2021-44222HistoryJul 12, 2022 - 10:06 a.m.
CVE-2021-44222
2022-07-1210:06:30
CWE-306
siemens
www.cve.org
3
simatic easie core package
vulnerability
unauthenticated
remote attackers
arbitrary messages
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system.
CNA Affected
[
{
"product": "SIMATIC eaSie Core Package",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V22.00"
}
]
}
]Related
prion
prion
Default configuration
2022-07-12 10:15:00
nvd
nvd
CVE-2021-44222
2022-07-12 10:15:10
cve
cve
CVE-2021-44222
2022-07-12 10:15:10
ics
ics
Siemens SIMATIC eaSie Core Package
2022-07-14 12:00:00