CVE-2022-46141
Medium
Description
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application.
SeverityMedium
CVSS4.2
Exploit probability—
ProductSiemens Simatic Step
PublishedDec 12, 2023
First seenDec 12, 2023
Weakness typeCWE-316CWE-316
How to fix
Update
- siemens simatic_step_719 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_step_7 | v < 19 | 19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.