← Database

CVE-2021-42029

HIGH CVSS: 7.8 Published: 2022-04-12 Modified: 2026-06-17

Description

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.

Affected Platforms

Siemens Simatic S7-1500 CpuSiemens Simatic S7-1500 Cpu 1518-4 PnSiemens Simatic S7-1200 Cpu 1214CSiemens Simatic S7-1500 Cpu 1513-1 PnSiemens Simatic S7-1200 Cpu 1212FcSiemens Simatic S7-1500 Cpu 1515F-2 PnSiemens Simatic S7-1500 Cpu 1518T-4Siemens Simatic S7-1500 Cpu 1516Pro FSiemens Simatic S7-1500 Cpu 1511T-1Siemens Simatic S7-1500 Cpu 1512C-1

Weakness Type

CWE-284, NVD-CWE-Other

References