Simatic S7 1500 Cpu 1518 4 Dp Firmware

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-30694 Nov 08, 11:15 MEDIUM PATCH This Month

The login endpoint /FormLogin in affected web services does not apply proper origin checking. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Simatic Wincc Runtime Simatic S7 1200 Cpu 1211C Firmware Simatic S7 1200 Cpu 1212C Firmware Simatic S7 1200 Cpu 1212Fc Firmware +109

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2022-30694

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

The login endpoint /FormLogin in affected web services does not apply proper origin checking. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Simatic Wincc Runtime Simatic S7 1200 Cpu 1211C Firmware +111

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy