← Database

CVE-2022-33138

HIGH CVSS: 7.5 Published: 2022-07-12 Modified: 2026-06-17

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Affected Platforms

Siemens Simatic Mv560 XSiemens Simatic Mv540 S FirmwareSiemens Simatic Mv550 SSiemens Simatic Mv560 USiemens Simatic Mv540 SSiemens Simatic Mv560 X FirmwareSiemens Simatic Mv560 U FirmwareSiemens Simatic Mv550 S FirmwareSiemens Simatic Mv550 H FirmwareSiemens Simatic Mv550 H

Weakness Type

CWE-306, CWE-306

References