Log in Start free

Vulnerability · Published Dec 13, 2022 · Assigned by siemens

CVE-2022-44731

Medium 5.4

In plain English

A medium-severity argument injection in SIMATIC WinCC OA V3.15 from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.6%top 52.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA V3.17 (All versions < V3.17 P024), SIMATIC WinCC OA V3.18 (All versions < V3.18 P014). The affected component allows to inject custom arguments to the Ultralight Client backend application under certain circumstances. This could allow an authenticated remote attacker to inject arbitrary parameters when starting the client via the web interface (e.g., open attacker chosen panels with the attacker's credentials or start a Ctrl script).

Affected products (as reported)

VendorProductVersions
Siemens SIMATIC WinCC OA V3.15 All versions < V3.15 P038
Siemens SIMATIC WinCC OA V3.16 All versions < V3.16 P035
Siemens SIMATIC WinCC OA V3.17 All versions < V3.17 P024
Siemens SIMATIC WinCC OA V3.18 All versions < V3.18 P014

Weakness: CWE-88 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C

References