CWE
352
Advisory Published
Updated

CVE-2022-30694: CSRF

First published: Tue Nov 08 2022(Updated: )

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

Credit: productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens S7-1500 Controller
Siemens SIMATIC S7-PLCSIM Advanced Firmware
Siemens SIMATIC WinCC Runtime Advanced
Siemens 6ES7154-8FB01-0AB0<3.2.19
Siemens 6ES7154-8FB01-0AB0 Firmware
Siemens 6ES7154-8AB01-0AB0<3.2.19
Siemens 6ES7154-8AB01-0AB0 Firmware
Siemens 6ES7154-8FX00-0AB0<3.2.19
Siemens 6ES7154-8FX00-0AB0
Siemens 6ES7151-8AB01-0AB0<3.2.19
Siemens S7-1500 Module 6ES7151-8AB01-0AB0
Siemens 6ES7151-8FB01-0AB0<3.2.19
Siemens S7-1500 Module
Siemens 6ES7314-6EH04-0AB0 Firmware<3.3.19
Siemens 6ES7314-6EH04-0AB0 Firmware
Siemens 6ES7315-2EH14-0AB0<3.2.19
Siemens S7-300 CPU
Siemens 6ES7315-2FJ14-0AB0<3.2.19
Siemens S7-1200
Siemens 6ES7315-7TJ10-0AB0<3.2.19
Siemens S7-300
Siemens S7-300 Series<3.2.19
Siemens 6ES7317-2EK14-0AB0 Firmware
Siemens 6ES7317-2FK14-0AB0<3.2.19
Siemens S7-300
Siemens S7-300 (6ES7317-7TK10-0AB0)<3.2.19
Siemens S7-300 (6ES7317-7TK10-0AB0)
Siemens S7-300 6ES7317-7UL10-0AB0<3.2.19
Siemens S7-300 6ES7317-7UL10-0AB0
Siemens 6ES7318-3EL01-0AB0<3.2.19
Siemens S7-300 6ES7318-3EL01-0AB0
Siemens 6ES7318-3FL01-0AB0 Firmware<3.2.19
Siemens 6ES7318-3FL01-0AB0 Firmware
Siemens 6AG1151-8AB01-7AB0<3.2.19
Siemens S7-1500
Siemens 6AG1151-8FB01-2AB0<3.2.19
Siemens 6AG1151-8FB01-2AB0
Siemens 6AG1314-6EH04-7AB0<3.3.19
Siemens 6AG1314-6EH04-7AB0 Firmware
Siemens Firmware<3.2.19
Siemens S7-300
Siemens 6AG1315-2FJ14-2AB0<3.2.19
Siemens 6AG1315-2FJ14-2AB0
Siemens Firmware<3.2.19
Siemens S7-300 Series
Siemens 6AG1317-2FK14-2AB0<3.2.19
Siemens S7-1500
Siemens Sinumerik One Firmware
Siemens Sinumerik One
Siemens Simatic PCS Firmware<=2.1
Siemens Simatic PCS 7
Siemens SIMATIC Drive Controller CPU 1504D TF
Siemens SIMATIC Drive Controller Firmware
Siemens SIMATIC Drive Controller CPU 1507D TF Firmware
Siemens SIMATIC Drive Controller CPU 1507D TF Firmware
Siemens SIMATIC S7-400 PN/DP V7 Firmware
Siemens SIMATIC S7-400 PN/DP V7
Siemens SIMATIC S7-400 PN/DP V6
Siemens SIMATIC S7-400 PN/DP V6
Siemens Simatic S7-1500 CPU 1507S F Firmware
Siemens Simatic S7-1500
Siemens S7-1500 Firmware
Siemens Simatic S7-1500 CPU 1507S F Firmware
Siemens SIMATIC S7-1500 Firmware
Siemens Simatic S7-1500
Siemens Simatic S7-1500 CPU 1508S F
Siemens S7-1500 CPU
Siemens SIMATIC S7-1500 CPU 1510SP Firmware
Siemens SIMATIC S7-1500 CPU 1510SP F-1
Siemens SIMATIC S7-1500 CPU 1510SP Firmware
Siemens SIMATIC S7-1500 CPU 1510SP Firmware
Siemens SIMATIC S7-1500 CPU 1511-1
Siemens SIMATIC S7-1500 CPU 1511-1 PN
Siemens SIMATIC S7-1500 CPU 1511-1 PN
Siemens SIMATIC S7-1500 CPU 1511-1
Siemens SIMATIC S7-1500 CPU 1511C-1 Firmware
Siemens SIMATIC S7-1500 CPU 1511C-1 PN
Siemens SIMATIC S7-1500 CPU 1511C-1
Siemens SIMATIC S7-1500 CPU 1511C-1 PN
Siemens SIMATIC S7-1500 CPU 1511f-1 PN
Siemens SIMATIC S7-1511F-1 PN CPU
Siemens SIMATIC S7-1500 CPU 1511F-1 Firmware
Siemens SIMATIC S7-1511F-1 PN CPU
Siemens SIMATIC S7-1500 CPU 1511T-1 Firmware
Siemens SIMATIC S7-1500 CPU 1511T-1 PN
Siemens SIMATIC S7-1500 CPU 1511TF-1
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN
Siemens SIMATIC S7-1500 CPU 1512C Firmware
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 1512C-1 PN Firmware
Siemens SIMATIC S7-1500 CPU 1512C-1 PN
Siemens SIMATIC S7-1500 CPU 1512SP-1
Siemens SIMATIC S7-1500 CPU 1512SP-1 PN
Siemens SIMATIC S7-1500 CPU 1512SPF-1
Siemens SIMATIC S7-1500 CPU 1512SPF-1 Firmware
Siemens SIMATIC S7-1513-1 PN CPU
Siemens SIMATIC S7-1513-1 PN CPU
Siemens SIMATIC S7-1500 CPU 1513-1 PN firmware
siemens SIMATIC S7-1500 CPU 1513-1 PN firmware
Siemens SIMATIC S7-1500 CPU 1513F-1
Siemens SIMATIC S7-1500 CPU 1513f-1 PN
Siemens SIMATIC S7-1500 CPU 1513f-1 PN
Siemens SIMATIC S7-1513F-1 PN CPU
Siemens SIMATIC S7-1500 CPU 1513R-1 PN Firmware
Siemens SIMATIC S7-1500 CPU 1513R-1 Firmware
Siemens SIMATIC S7-1500 CPU 151511C-1
Siemens SIMATIC S7-1500 CPU 151511C-1
Siemens SIMATIC S7-1500 CPU 151511F-1
Siemens SIMATIC S7-1500 CPU 1511F-1 Firmware
Siemens S7-1500 Firmware
Siemens SIMATIC S7-1515-2 PN CPU
Siemens Simatic S7-1500 CPU 1515-2 Firmware
Siemens SIMATIC S7-1500 CPU 1515-2
Siemens SIMATIC S7-1500 CPU 1515f-2 PN firmware
Siemens S7-1500 CPU
Siemens SIMATIC S7-1515F-2 PN CPU
Siemens SIMATIC S7-1515F-2 PN CPU
Siemens Simatic S7-1500 CPU 1515R-2 Firmware
Siemens SIMATIC S7-1500 CPU 1515R-2 PN
Siemens Simatic S7-1500 CPU 1515T-2 Firmware
Siemens Simatic S7-1500 CPU 1515T-2 PN
Siemens SIMATIC S7-1500 CPU 1515TF-2
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN
Siemens SIMATIC S7-1500 CPU 1516-3
Siemens SIMATIC S7-1500
Siemens SIMATIC S7-1500 CPU 1516-3 DP Firmware
Siemens SIMATIC S7-1500 CPU 1516-3 DP Firmware
Siemens SIMATIC S7-1516-3 PN/DP CPU
Siemens SIMATIC S7-1500 CPU 1516-3
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP Firmware
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP
Siemens SIMATIC S7-1516F-3 PN/DP CPU
Siemens SIMATIC S7-1516F-3 PN/DP CPU
Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP Firmware
Siemens SIMATIC S7-1500 CPU 1516f-3 PN/DP
Siemens SIMATIC S7-1500 CPU 1516PRO F Firmware
Siemens SIMATIC S7-1500 CPU 1516PRO F-2 PN
Siemens SIMATIC S7-1500 CPU 1516PRO-2 Firmware
Siemens SIMATIC S7-1500 CPU 1516pro-2 PN
Siemens Simatic S7-1500 CPU 1516T-3
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 1516TF-3 Firmware
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 1517-3 PN Firmware
Siemens SIMATIC S7-1517-3 PN/DP CPU
Siemens SIMATIC S7-1500 CPU 1517-3 DP
Siemens SIMATIC S7-1517-3 PN/DP CPU
Siemens SIMATIC S7-1500 CPU 1517-3 PN
Siemens SIMATIC S7-1517-3 PN/DP CPU
siemens SIMATIC S7-1500 CPU 1517-3 pn/dp firmware
Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP
Siemens SIMATIC S7-1500 CPU 1517F-3
Siemens SIMATIC S7-1500 CPU 1517F-3 Firmware
siemens SIMATIC S7-1500 CPU 1517f-3 pn/dp firmware
Siemens SIMATIC S7-1500 CPU 1517f-3 PN/DP
Siemens SIMATIC S7-1500 T Firmware
Siemens SIMATIC S7-1500 CPU 1517TF-3 Firmware
Siemens SIMATIC S7-1500 CPU 1518F-4
Siemens S7-1500
Siemens SIMATIC S7-1518-4 PN/DP CPU
Siemens SIMATIC S7-1500
Siemens Simatic S7-1500 CPU 1518-4 DP
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP Firmware
Siemens SIMATIC CPU 1518-4
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP Firmware
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens SIMATIC S7-1500 CPU 1518F-4
Siemens SIMATIC S7-1518F-4 PN/DP CPU
Siemens SIMATIC S7-1500 CPU 1518f-4 pn/dp firmware
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP
Siemens SIMATIC S7-1500 CPU 1518-4 Firmware
Siemens Simatic S7-1500
Siemens Simatic S7-1500 CPU 1518T-4 PN/DP Firmware
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 1518T-4 Firmware
Siemens Simatic S7-1500
Siemens SIMATIC S7-1500 CPU 15PROF-2 Firmware
Siemens SIMATIC S7-1500 CPU 15PRO-2 Firmware
Siemens Simatic S7-1500 CPU 15PROF-2
Siemens SIMATIC S7-1500 CPU 15PROF-2 Firmware
Siemens Simatic S7-1500 CPU 1513Pro-2
Siemens Simatic S7-1500 CPU 1513Pro-2
Siemens SIMATIC S7-1500 CPU 1513PROF-2 Firmware
Siemens SIMATIC S7-1500 CPU 1513PROF-2 Firmware
Siemens Simatic S7-1200 CPU 1211C Firmware
Siemens SIMATIC S7-1200 CPU 1211C
Siemens SIMATIC S7-1200 CPU 1212C Firmware
Siemens SIMATIC S7-1200 CPU 1212C
Siemens SIMATIC S7-1200 CPU 1212FC Firmware
Siemens SIMATIC S7-1200 CPU 1212FC
Siemens SIMATIC S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU 1214FC Firmware
Siemens SIMATIC S7-1200 CPU 1214FC
Siemens SIMATIC S7-1200 CPU 1215C Firmware
Siemens SIMATIC S7-1200 CPU 1215C Firmware
Siemens SIMATIC S7-1200 CPU 1215FC Firmware
Siemens SIMATIC S7-1200 CPU 1215FC Firmware
Siemens SIMATIC S7-1200 CPU 1217C Firmware
Siemens SIMATIC S7-1200 CPU 1217C
Siemens S7-1200 CPU 1211C Firmware
Siemens Simatic S7-1200 CPU 1211C Firmware
Siemens S7-1200 CPU 1212C Firmware
Siemens SIMATIC S7-1200 CPU 1212C Firmware
Siemens S7-1200 CPU 1212FC Firmware
Siemens S7-1200 CPU 1212FC
Siemens SIMATIC S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly
Siemens S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU
Siemens S7-1200 CPU 1214FC Firmware
Siemens SIMATIC S7-1200 CPU 1214FC Firmware
Siemens Simatic S7-1200 CPU Firmware
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC
Siemens CPU 1215C
Siemens Simatic S7-1200 CPU Firmware
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC
Siemens S7-1200 CPU 1217C Firmware
Siemens S7-1200 CPU 1217C

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2022-30694?

    The severity of CVE-2022-30694 is significant due to its potential to allow authenticated remote attackers to execute cross-site request forgery attacks.

  • How do I fix CVE-2022-30694?

    To fix CVE-2022-30694, ensure proper origin checking is implemented in the /FormLogin endpoint of the affected web services.

  • Which software versions are affected by CVE-2022-30694?

    CVE-2022-30694 affects multiple Siemens software products including varying versions of SIMATIC S7-1500, WinCC Runtime, and others.

  • Can CVE-2022-30694 be exploited remotely?

    Yes, CVE-2022-30694 can be exploited remotely by authenticated attackers.

  • What potential impact does CVE-2022-30694 have?

    The potential impact of CVE-2022-30694 includes the ability for attackers to track activities of other users through login cross-site request forgery attacks.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203