CVE-2021-37172CWE-287

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl

published August 10, 2021

CVSS
—
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00922 · 60.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-08-10T10:35Z
EPSS history
Timeline
  • 10 AUG 10:35Z
    A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl
    cvelistv5