A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC MV540 H
Vendor
Siemens
Product
SIMATIC MV540 H
Platforms
Unknown
Default status
Unknown
SIMATIC MV540 H · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC MV540 S
Vendor
Siemens
Product
SIMATIC MV540 S
Platforms
Unknown
Default status
Unknown
SIMATIC MV540 S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC MV550 H
Vendor
Siemens
Product
SIMATIC MV550 H
Platforms
Unknown
Default status
Unknown
SIMATIC MV550 H · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC MV550 S
Vendor
Siemens
Product
SIMATIC MV550 S
Platforms
Unknown
Default status
Unknown
SIMATIC MV550 S · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC MV560 U
Vendor
Siemens
Product
SIMATIC MV560 U
Platforms
Unknown
Default status
Unknown
SIMATIC MV560 U · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V3.3
affected
Unavailable
Unavailable
Unavailable
None listed
SIMATIC MV560 X
Vendor
Siemens
Product
SIMATIC MV560 X
Platforms
Unknown
Default status
Unknown
SIMATIC MV560 X · Scoped product and version facts