CRITICAL🇬🇧 English

CVE-2022-33139

CVSS 9.8v3.1pub. 2022-06-21upd. 2024-11-21

A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siemens Cerberus Dms

    APP
    Siemens
    wszystkie wersje

  • Siemens Desigo Cc

    APP
    Siemens
    wszystkie wersje

  • Siemens Desigo Cc Compact

    APP
    Siemens
    wszystkie wersje

  • Siemens Wincc Open Architecture

    APP
    Siemens
    3.163.173.18
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2021-31891CRITICAL10.0ten sam produkt

A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All ve...

CVE-2021-37181CRITICAL10.0ten sam produkt

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cer...

CVE-2014-0160HIGH7.5⚠ KEVten sam produkt

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Exten...

CVE-2026-0300CRITICAL9.3⚠ KEVPL ✓ten sam vendor

Buffer overflow RCE z uprawnieniami root w PAN-OS Captive Portal

CVE-2026-24858CRITICAL9.8⚠ KEVPL ✓ten sam vendor

Fortinet – Auth Bypass przez FortiCloud SSO w wielu produktach