← Database

CVE-2021-37172

HIGH CVSS: 7.5 Published: 2021-08-10 Modified: 2026-06-17

Description

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

Affected Platforms

Siemens Cpu 1214CSiemens Cpu 1212CSiemens Simatic S7-1200 Cpu FirmwareSiemens Cpu 1214FcSiemens Cpu 1217CSiemens Cpu 1211CSiemens Cpu 1215CSiemens Cpu 1215FcSiemens Simatic Step 7 \(Tia Portal\)Siemens Cpu 1212Fc

Weakness Type

CWE-287, CWE-287

References