CVE-2021-44222

CVE-2021-44222 affects Siemens SIMATIC eaSie Core Package: all versions before v22.00 with the MQTT service that does not perform authentication by default, allowing an unauthenticated remote attacker to send arbitrary messages and issue arbitrary requests within the affected system. MITRE CVSSv3...

CVE-2021-44221

CVE-2021-44221 affects Siemens SIMATIC eaSie Core Package (all versions before v22.00). The underlying issue is improper input validation in the message passing framework, allowing a remote attacker to trigger a denial of service. ICSA/Siemens advisories cite a CVSSv3 base score of 7.5 (AV:N/AC:L...