CVE-2021-37172

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-37172
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:4.5.0:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):*:*:*:*:*:*:*:*
History

01 Jul 2022, 17:44

Type Values Removed Values Added
CPE cpe:2.3:a:siemens:simatic_step_7_\(tia_portal\):*:*:*:*:*:*:*:*

14 Sep 2021, 11:15

Type Values Removed Values Added
Summary A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V17 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device. A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

20 Aug 2021, 19:12

Type Values Removed Values Added
CWE CWE-287
CPE cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:4.5.0:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : 5.0
v3 : 7.5
References (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf - (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf - Patch, Vendor Advisory

10 Aug 2021, 11:46

Type Values Removed Values Added
New CVE
Information

Published : 2021-08-10 11:15

Updated : 2024-02-04 21:47

NVD link : CVE-2021-37172

Mitre link : CVE-2021-37172

CVE.ORG link : CVE-2021-37172

JSON object : View

Products Affected

siemens

  • cpu_1214c
  • cpu_1214fc
  • cpu_1211c
  • simatic_s7-1200_cpu_firmware
  • cpu_1217c
  • cpu_1212c
  • cpu_1212fc
  • cpu_1215fc
  • simatic_step_7_\(tia_portal\)
  • cpu_1215c
CWE
CWE-287

Improper Authentication