ICSA-21-222-09 | Vulnetix

ICSA-21-222-09 PUBLISHED CVSS 8.100000381469727 HIGH

Record from circl · Published August 10, 2021

SIMATIC S7-1200 PLC, version V4.5.0 fails to authenticate against configured passwords when the affected device was provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. Siemens has released an update for SIMATIC S7-1200 and recommends to update to the latest version.

Risk scores

CVSS 3.1

8.100000381469727

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected products

Vendor	Product	Versions
	SIMATIC S7-1200 CPU family (incl. SIPLUS variants)

Timeline

Aug 10, 2021 CVE Published
May 6, 2025 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln ICSA-21-222-09
vulnetix vdb fixes ICSA-21-222-09

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/ICSA-21-222-09/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →