Riskcovery

CVE-2022-44731

State
Published
Severity
5.4 Medium
Published
Dec 13, 2022
Updated
Apr 21, 2025
Reserved
Nov 4, 2022

Read the record on cve.org

Description

A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances.

This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script).

Scores

CVSSScoreVectorSource
3.15.4 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected Products

ProductVersions
SIMATIC WinCC OA V3.15Siemens
  • All versions < V3.15 P038Affected
SIMATIC WinCC OA V3.16Siemens
  • All versions < V3.16 P035Affected
SIMATIC WinCC OA V3.17Siemens
  • All versions < V3.17 P024Affected
SIMATIC WinCC OA V3.18Siemens
  • All versions < V3.18 P014Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.