HIGH🇵🇱 Wersja polska

CVE-2021-42029

CVSS 7.8v3.1pub. 2022-04-12upd. 2024-11-21

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Siemens Simatic S7 1200 Cpu

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1211c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1212c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1212fc

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1214c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1214 Fc

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1214fc

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1215c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1215 Fc

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1215fc

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1200 Cpu 1217c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1507s

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1507s F

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1508s

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1508s F

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1510sp

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1510sp 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511 1 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511c 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511f 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511f 1 Pn

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511t 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1511tf 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1512c

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1512c 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1512sp 1

    HW
    Siemens
    all versions

  • Siemens Simatic S7 1500 Cpu 1512spf 1

    HW
    Siemens
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2023-25910CRITICAL10.0PL ✓same product

Siemens SIMATIC — RCE przez wbudowane funkcje systemu zarządzania bazą danych

CVE-2022-38465CRITICAL9.3PL ✓same product

Siemens SIMATIC — niewystarczająca ochrona globalnego klucza prywatnego

CVE-2026-31431HIGH7.8⚠ KEVPL ✓same product

Błąd w Linux kernel crypto/algif_aead — operacja in-place na współdzielonych mapowaniach

CVE-2023-44487HIGH7.5⚠ KEVsame product

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can ...

CVE-2023-4911HIGH7.8⚠ KEVsame product

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABL...