Siemens SIMATIC eaSie PCS 7 Skill Package

🗓️ 14 Dec 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 27 Views

Siemens SIMATIC eaSie PCS 7 Skill Package vulnerability allows authenticated remote attacker to read arbitrary files on server. Update to v21.00 SP3 or later recommended

Reporter	Title	Published	Views	Family All 10
CNNVD	Siemens SIMATIC PCS 7 路径遍历漏洞	14 Dec 202100:00	–	cnnvd
CNVD	SIMATIC eaSie PCS 7 Skill Package (6DL5424- 0BX00-0AV8) Arbitrary File Download Vulnerability	16 Dec 202100:00	–	cnvd
CVE	CVE-2021-42022	14 Dec 202112:06	–	cve
Cvelist	CVE-2021-42022	14 Dec 202112:06	–	cvelist
EUVD	EUVD-2021-29010	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in SIMATIC eaSie PCS7	14 Dec 202100:00	–	ncsc
NVD	CVE-2021-42022	14 Dec 202112:15	–	nvd
OSV	CVE-2021-42022	14 Dec 202112:15	–	osv
Prion	Design/Logic Flaw	14 Dec 202112:15	–	prion
RedhatCVE	CVE-2021-42022	22 May 202518:47	–	redhatcve

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-199605.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-199605.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-199605.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-350-11.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-350-11
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

14 Dec 2021 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 23.5

CVSS 3.16.5

EPSS0.00434