High severity · published Jul 12, 2022
CVE-2022-34820
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions <…
8.4
CVSS
2.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). The application does not correctly escape some user provided fields during the authentication process. This could allow an attacker to inject custom commands and execute arbitrary code with elevated privileges.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Simatic CP 1242-7 V2 Firmware · Siemens
before 3.3.46 · source: NVD
SC
Simatic CP 1243-1 Firmware · Siemens
before 3.3.46 · source: NVD
SC
Simatic CP 1243-7 Lte EU Firmware · Siemens
before 3.3.46 · source: NVD
SC
Simatic CP 1243-7 Lte US Firmware · Siemens
before 3.3.46 · source: NVD
SC
Simatic CP 1243-8 Irc Firmware · Siemens
before 3.3.46 · source: NVD
SC
Simatic CP 1542sp-1 Irc Firmware · Siemens
2.0 before 2.2.28 · source: NVD
SC
Simatic CP 1543-1 Firmware · Siemens
before 3.0.22 · source: NVD
SC
Simatic CP 1543sp-1 Firmware · Siemens
2.0 before 2.2.28 · source: NVD
SE
Siplus ET 200sp CP 1542sp-1 Irc TX Rail Firmware · Siemens
2.0 before 2.2.28 · source: NVD
SE
Siplus ET 200sp CP 1543sp-1 Isec Firmware · Siemens
2.0 before 2.2.28 · source: NVD
SE
Siplus ET 200sp CP 1543sp-1 Isec TX Rail Firmware · Siemens
2.0 before 2.2.28 · source: NVD
SN
Siplus Net CP 1242-7 V2 Firmware · Siemens
before 3.3.46 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-34820
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-34820
Patch
https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf
More from Simatic CP 1242-7 V2 Firmware
10.0
CVE-2022-34819
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions <…
7.6
CVE-2022-34821
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2),…
7.5
CVE-2023-38380
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl
7.5
CVE-2022-43768
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC…
7.5
CVE-2022-43767
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC…