VULNERABILITY INTELLIGENCE

CVE-2021-44222

CVSS score9.1 CRITICAL
EPSS probability1.34%
CISA KEVNot currently listed
Published2022-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system.

Weakness classification

  • productcert@siemens.com: CWE-306
  • nvd@nist.gov: CWE-306

Primary references