CVE-2021-37172
published 2021-08-10CVE-2021-37172: A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured…
PriorityP350high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.92%
56.1th percentile
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | simatic_s7-1200_cpu_family | — | — |
| siemens | simatic_s7-1200_cpu_firmware | — | — |
| siemens | simatic_step_7 | <= 13.0 | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jx4h-7jg8-gqhf: A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl
ghsa_unreviewed·2022-05-24
CVE-2021-37172 [HIGH] CWE-287 GHSA-jx4h-7jg8-gqhf: A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V17 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
CISA ICS
Siemens SIMATIC S7-1200 (Update A)
cisa_ics·2021-08-10·CVSS 7.5
[HIGH] Siemens SIMATIC S7-1200 (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens SIMATIC S7-1200 (Update A)
Last RevisedJanuary 11, 2022
Alert CodeICSA-21-222-09
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.1
- ATTENTION: Exploitable remotely
- Vendor: Siemens
- Equipment: SIMATIC S7-1200 Devices
- Vulnerability: Improper Authentication
## 2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-21-222-09 Siemens SIMATIC S7-1200 that was published August 10, 2021, to the ICS webpage on us-cert.cisa.gov.
## 3. RISK EVALUATION
--------- Begin Update A Part 1 of 2 ---------
Successful exploitation of this vulnerabi
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-08-10
Published