← Database
CVE-2022-30694
MEDIUM
CVSS: 6.5
Published: 2022-11-08
Modified: 2026-06-17
Description
The login endpoint /FormLogin in affected web services does not apply proper origin checking.
This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Affected Platforms
Siemens Simatic S7-1500 Software ControllerSiemens Simatic S7-1500 Cpu 1516-3 Dp FirmwareSiemens Simatic S7-1500 Cpu 1515F-2 PnSiemens Simatic S7-1200 Cpu 1212FcSiemens 6Es7151-8Fb01-0Ab0 FirmwareSiemens Simatic S7-1500 Cpu 1512C-1 FirmwareSiemens Simatic S7-1500 Cpu 1511T-1 FirmwareSiemens 6Es7314-6Eh04-0Ab0 FirmwareSiemens 6Es7154-8Fx00-0Ab0Siemens Simatic S7-1500 Cpu 1516Pro-2
Weakness Type
CWE-352, CWE-352