VDB

CVE-2021-33716

CVE-2021-33716 PUBLISHED CVSS 6.5 MEDIUM

A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions). An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext.

EPSS 0.04% · 14.0th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.04%
14.0th percentile

Affected Products

VendorProductVersions
siemenssimatic_cp_1545-1_firmware0
SiemensSIMATIC CP 1543-1 (incl. SIPLUS variants)All versions < V3.0
siemenssimatic_cp_1543-1_firmware0
SiemensSIMATIC CP 1545-1All versions < V1.1

Timeline

  • Apr 13, 2021 CVE Published
  • Sep 15, 2021 EPSS Score
  • Nov 11, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Jan 8, 2022 EPSS Score
  • Mar 6, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jun 29, 2022 EPSS Score
  • Aug 26, 2022 EPSS Score
  • Oct 23, 2022 EPSS Score
  • Dec 19, 2022 EPSS Score
  • Feb 15, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›