CVE-2022-34820

State: Published
Severity: 8.4 High
Published: Jul 12, 2022
Updated: Apr 21, 2025
Reserved: Jun 29, 2022

Description

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). The application does not correctly escape some user provided fields during the authentication process. This could allow an attacker to inject custom commands and execute arbitrary code with elevated privileges.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C	siemens

Weaknesses

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected Products

Product	Versions
SIMATIC CP 1242-7 V2Siemens	All versions < V3.3.46Affected
SIMATIC CP 1243-1Siemens	All versions < V3.3.46Affected
SIMATIC CP 1243-7 LTE EUSiemens	All versions < V3.3.46Affected
SIMATIC CP 1243-7 LTE USSiemens	All versions < V3.3.46Affected
SIMATIC CP 1243-8 IRCSiemens	All versions < V3.3.46Affected
SIMATIC CP 1542SP-1 IRCSiemens	All versions >= V2.0 < V2.2.28Affected
SIMATIC CP 1543-1Siemens	All versions < V3.0.22Affected
SIMATIC CP 1543SP-1Siemens	All versions >= V2.0 < V2.2.28Affected
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAILSiemens	All versions >= V2.0 < V2.2.28Affected
SIPLUS ET 200SP CP 1543SP-1 ISECSiemens	All versions >= V2.0 < V2.2.28Affected
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAILSiemens	All versions >= V2.0 < V2.2.28Affected
SIPLUS NET CP 1242-7 V2Siemens	All versions < V3.3.46Affected
SIPLUS NET CP 1543-1Siemens	All versions < V3.0.22Affected
SIPLUS S7-1200 CP 1243-1Siemens	All versions < V3.3.46Affected
SIPLUS S7-1200 CP 1243-1 RAILSiemens	All versions < V3.3.46Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.