CVE-2021-42029

Published: Apr 12, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.

Affected (8)

Products: Siemens: Simatic Step 7

Siemens

1 product

Simatic Step 7

Configuration A

8 vulnerable · 70 platform

Vulnerable Software	Affected Versions
Siemens Simatic Step 7	From 15 to 16
Siemens Simatic Step 7	Version 16
Siemens Simatic Step 7	Version 16 update1
Siemens Simatic Step 7	Version 16 update2
Siemens Simatic Step 7	Version 16 update3
Siemens Simatic Step 7	Version 16 update4
Siemens Simatic Step 7	Version 17
Siemens Simatic Step 7	Version 17 update1

Running on/with	Platform Versions
Siemens Simatic S7 1200 Cpu	All versions
Siemens Simatic S7 1200 Cpu 1211c	All versions
Siemens Simatic S7 1200 Cpu 1212c	All versions
Siemens Simatic S7 1200 Cpu 1212fc	All versions
Siemens Simatic S7 1200 Cpu 1214 Fc	All versions
Siemens Simatic S7 1200 Cpu 1214c	All versions
Siemens Simatic S7 1200 Cpu 1214fc	All versions
Siemens Simatic S7 1200 Cpu 1215 Fc	All versions
Siemens Simatic S7 1200 Cpu 1215c	All versions
Siemens Simatic S7 1200 Cpu 1215fc	All versions
Siemens Simatic S7 1200 Cpu 1217c	All versions
Siemens Simatic S7 1500 Cpu	All versions
Siemens Simatic S7 1500 Cpu 1507s	All versions
Siemens Simatic S7 1500 Cpu 1507s F	All versions
Siemens Simatic S7 1500 Cpu 1508s	All versions
Siemens Simatic S7 1500 Cpu 1508s F	All versions
Siemens Simatic S7 1500 Cpu 1510sp	All versions
Siemens Simatic S7 1500 Cpu 1510sp 1	All versions
Siemens Simatic S7 1500 Cpu 1511 1	All versions
Siemens Simatic S7 1500 Cpu 1511 1 Pn	All versions
Siemens Simatic S7 1500 Cpu 1511c	All versions
Siemens Simatic S7 1500 Cpu 1511c 1	All versions
Siemens Simatic S7 1500 Cpu 1511f 1	All versions
Siemens Simatic S7 1500 Cpu 1511f 1 Pn	All versions
Siemens Simatic S7 1500 Cpu 1511t 1	All versions
Siemens Simatic S7 1500 Cpu 1511tf 1	All versions
Siemens Simatic S7 1500 Cpu 1512c	All versions
Siemens Simatic S7 1500 Cpu 1512c 1	All versions
Siemens Simatic S7 1500 Cpu 1512sp 1	All versions
Siemens Simatic S7 1500 Cpu 1512spf 1	All versions
Siemens Simatic S7 1500 Cpu 1513 1	All versions
Siemens Simatic S7 1500 Cpu 1513 1 Pn	All versions
Siemens Simatic S7 1500 Cpu 1513f 1	All versions
Siemens Simatic S7 1500 Cpu 1513f 1 Pn	All versions
Siemens Simatic S7 1500 Cpu 1513r 1	All versions
Siemens Simatic S7 1500 Cpu 1515 2	All versions
Siemens Simatic S7 1500 Cpu 1515 2 Pn	All versions
Siemens Simatic S7 1500 Cpu 1515f 2	All versions
Siemens Simatic S7 1500 Cpu 1515f 2 Pn	All versions
Siemens Simatic S7 1500 Cpu 1515r 2	All versions
Siemens Simatic S7 1500 Cpu 1515t 2	All versions
Siemens Simatic S7 1500 Cpu 1515tf 2	All versions
Siemens Simatic S7 1500 Cpu 1516 3	All versions
Siemens Simatic S7 1500 Cpu 1516 3 Dp	All versions
Siemens Simatic S7 1500 Cpu 1516 3 Pn	All versions
Siemens Simatic S7 1500 Cpu 1516 3 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1516f 3	All versions
Siemens Simatic S7 1500 Cpu 1516f 3 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1516pro 2	All versions
Siemens Simatic S7 1500 Cpu 1516pro F	All versions
Siemens Simatic S7 1500 Cpu 1516t 3	All versions
Siemens Simatic S7 1500 Cpu 1516tf 3	All versions
Siemens Simatic S7 1500 Cpu 1517 3	All versions
Siemens Simatic S7 1500 Cpu 1517 3 Dp	All versions
Siemens Simatic S7 1500 Cpu 1517 3 Pn	All versions
Siemens Simatic S7 1500 Cpu 1517 3 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1517f 3	All versions
Siemens Simatic S7 1500 Cpu 1517f 3 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1517tf 3	All versions
Siemens Simatic S7 1500 Cpu 1518	All versions
Siemens Simatic S7 1500 Cpu 1518 4	All versions
Siemens Simatic S7 1500 Cpu 1518 4 Dp	All versions
Siemens Simatic S7 1500 Cpu 1518 4 Pn	All versions
Siemens Simatic S7 1500 Cpu 1518 4 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp	All versions
Siemens Simatic S7 1500 Cpu 1518f 4	All versions
Siemens Simatic S7 1500 Cpu 1518f 4 Pn/dp	All versions
Siemens Simatic S7 1500 Cpu 1518hf 4	All versions
Siemens Simatic S7 1500 Cpu 1518t 4	All versions
Siemens Simatic S7 1500 Cpu 1518tf 4	All versions

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://cert-portal.siemens.com/productcert/pdf/ssa-350757.pdf

Source: productcert@siemens.com

PatchVendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-350757.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.