Siemens SIMATIC eaSie Core Package

• CVE-2025-30033 High 7.8 The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup componen 0.2%
• CVE-2021-44222 Unrated A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. 1.3%
• CVE-2021-44221 Unrated A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing framework. 1.4%