CVE-2022-30694

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources

Severity

3.5LOW

EPSS

0.1%

top 71.73%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

125

Siemens 6ag1151-8ab01-7ab0 Firmware Siemens 6ag1151-8fb01-2ab0 Firmware Siemens 6ag1314-6eh04-7ab0 Firmware +122 more

Timeline

PublishedNov 8

Description

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages125 packages

▶NVDsiemens/6ag1151-8ab01-7ab0_firmware< 3.2.19

▶NVDsiemens/6ag1151-8fb01-2ab0_firmware< 3.2.19

▶NVDsiemens/6ag1314-6eh04-7ab0_firmware< 3.3.19

▶NVDsiemens/6ag1315-2eh14-7ab0_firmware< 3.2.19

▶NVDsiemens/6ag1315-2fj14-2ab0_firmware< 3.2.19

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

GHSA

GHSA-4f6c-cjgm-c8qx: A vulnerability has been identified in SIMATIC Drive Controller family (All versions), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions = V2↗2022-11-08

▶

CVEList

CVE-2022-30694: The login endpoint /FormLogin in affected web services does not apply proper origin checking↗2022-11-08

▶