CVE-2022-33138

No fix known EPSS 1%

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Published 2022-07-12 · CVE record · OSV

Products: Siemens SIMATIC MV540 H, Siemens SIMATIC MV540 S, Siemens SIMATIC MV550 H, Siemens SIMATIC MV550 S, Siemens SIMATIC MV560 U, Siemens SIMATIC MV560 X