First published: Tue Nov 08 2022(Updated: )
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
Credit: productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens S7-1500 Controller | ||
Siemens SIMATIC S7-PLCSIM Advanced Firmware | ||
Siemens SIMATIC WinCC Runtime Advanced | ||
Siemens 6ES7154-8FB01-0AB0 | <3.2.19 | |
Siemens 6ES7154-8FB01-0AB0 Firmware | ||
Siemens 6ES7154-8AB01-0AB0 | <3.2.19 | |
Siemens 6ES7154-8AB01-0AB0 Firmware | ||
Siemens 6ES7154-8FX00-0AB0 | <3.2.19 | |
Siemens 6ES7154-8FX00-0AB0 | ||
Siemens 6ES7151-8AB01-0AB0 | <3.2.19 | |
Siemens S7-1500 Module 6ES7151-8AB01-0AB0 | ||
Siemens 6ES7151-8FB01-0AB0 | <3.2.19 | |
Siemens S7-1500 Module | ||
Siemens 6ES7314-6EH04-0AB0 Firmware | <3.3.19 | |
Siemens 6ES7314-6EH04-0AB0 Firmware | ||
Siemens 6ES7315-2EH14-0AB0 | <3.2.19 | |
Siemens S7-300 CPU | ||
Siemens 6ES7315-2FJ14-0AB0 | <3.2.19 | |
Siemens S7-1200 | ||
Siemens 6ES7315-7TJ10-0AB0 | <3.2.19 | |
Siemens S7-300 | ||
Siemens S7-300 Series | <3.2.19 | |
Siemens 6ES7317-2EK14-0AB0 Firmware | ||
Siemens 6ES7317-2FK14-0AB0 | <3.2.19 | |
Siemens S7-300 | ||
Siemens S7-300 (6ES7317-7TK10-0AB0) | <3.2.19 | |
Siemens S7-300 (6ES7317-7TK10-0AB0) | ||
Siemens S7-300 6ES7317-7UL10-0AB0 | <3.2.19 | |
Siemens S7-300 6ES7317-7UL10-0AB0 | ||
Siemens 6ES7318-3EL01-0AB0 | <3.2.19 | |
Siemens S7-300 6ES7318-3EL01-0AB0 | ||
Siemens 6ES7318-3FL01-0AB0 Firmware | <3.2.19 | |
Siemens 6ES7318-3FL01-0AB0 Firmware | ||
Siemens 6AG1151-8AB01-7AB0 | <3.2.19 | |
Siemens S7-1500 | ||
Siemens 6AG1151-8FB01-2AB0 | <3.2.19 | |
Siemens 6AG1151-8FB01-2AB0 | ||
Siemens 6AG1314-6EH04-7AB0 | <3.3.19 | |
Siemens 6AG1314-6EH04-7AB0 Firmware | ||
Siemens Firmware | <3.2.19 | |
Siemens S7-300 | ||
Siemens 6AG1315-2FJ14-2AB0 | <3.2.19 | |
Siemens 6AG1315-2FJ14-2AB0 | ||
Siemens Firmware | <3.2.19 | |
Siemens S7-300 Series | ||
Siemens 6AG1317-2FK14-2AB0 | <3.2.19 | |
Siemens S7-1500 | ||
Siemens Sinumerik One Firmware | ||
Siemens Sinumerik One | ||
Siemens Simatic PCS Firmware | <=2.1 | |
Siemens Simatic PCS 7 | ||
Siemens SIMATIC Drive Controller CPU 1504D TF | ||
Siemens SIMATIC Drive Controller Firmware | ||
Siemens SIMATIC Drive Controller CPU 1507D TF Firmware | ||
Siemens SIMATIC Drive Controller CPU 1507D TF Firmware | ||
Siemens SIMATIC S7-400 PN/DP V7 Firmware | ||
Siemens SIMATIC S7-400 PN/DP V7 | ||
Siemens SIMATIC S7-400 PN/DP V6 | ||
Siemens SIMATIC S7-400 PN/DP V6 | ||
Siemens Simatic S7-1500 CPU 1507S F Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens S7-1500 Firmware | ||
Siemens Simatic S7-1500 CPU 1507S F Firmware | ||
Siemens SIMATIC S7-1500 Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens Simatic S7-1500 CPU 1508S F | ||
Siemens S7-1500 CPU | ||
Siemens SIMATIC S7-1500 CPU 1510SP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1510SP F-1 | ||
Siemens SIMATIC S7-1500 CPU 1510SP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1510SP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1511-1 | ||
Siemens SIMATIC S7-1500 CPU 1511-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1511-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1511-1 | ||
Siemens SIMATIC S7-1500 CPU 1511C-1 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1511C-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1511C-1 | ||
Siemens SIMATIC S7-1500 CPU 1511C-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1511f-1 PN | ||
Siemens SIMATIC S7-1511F-1 PN CPU | ||
Siemens SIMATIC S7-1500 CPU 1511F-1 Firmware | ||
Siemens SIMATIC S7-1511F-1 PN CPU | ||
Siemens SIMATIC S7-1500 CPU 1511T-1 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1511T-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1511TF-1 | ||
Siemens SIMATIC S7-1500 CPU 1511TF-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1512C Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1512C-1 PN Firmware | ||
Siemens SIMATIC S7-1500 CPU 1512C-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1512SP-1 | ||
Siemens SIMATIC S7-1500 CPU 1512SP-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1512SPF-1 | ||
Siemens SIMATIC S7-1500 CPU 1512SPF-1 Firmware | ||
Siemens SIMATIC S7-1513-1 PN CPU | ||
Siemens SIMATIC S7-1513-1 PN CPU | ||
Siemens SIMATIC S7-1500 CPU 1513-1 PN firmware | ||
siemens SIMATIC S7-1500 CPU 1513-1 PN firmware | ||
Siemens SIMATIC S7-1500 CPU 1513F-1 | ||
Siemens SIMATIC S7-1500 CPU 1513f-1 PN | ||
Siemens SIMATIC S7-1500 CPU 1513f-1 PN | ||
Siemens SIMATIC S7-1513F-1 PN CPU | ||
Siemens SIMATIC S7-1500 CPU 1513R-1 PN Firmware | ||
Siemens SIMATIC S7-1500 CPU 1513R-1 Firmware | ||
Siemens SIMATIC S7-1500 CPU 151511C-1 | ||
Siemens SIMATIC S7-1500 CPU 151511C-1 | ||
Siemens SIMATIC S7-1500 CPU 151511F-1 | ||
Siemens SIMATIC S7-1500 CPU 1511F-1 Firmware | ||
Siemens S7-1500 Firmware | ||
Siemens SIMATIC S7-1515-2 PN CPU | ||
Siemens Simatic S7-1500 CPU 1515-2 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1515-2 | ||
Siemens SIMATIC S7-1500 CPU 1515f-2 PN firmware | ||
Siemens S7-1500 CPU | ||
Siemens SIMATIC S7-1515F-2 PN CPU | ||
Siemens SIMATIC S7-1515F-2 PN CPU | ||
Siemens Simatic S7-1500 CPU 1515R-2 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1515R-2 PN | ||
Siemens Simatic S7-1500 CPU 1515T-2 Firmware | ||
Siemens Simatic S7-1500 CPU 1515T-2 PN | ||
Siemens SIMATIC S7-1500 CPU 1515TF-2 | ||
Siemens SIMATIC S7-1500 CPU 1515TF-2 PN | ||
Siemens SIMATIC S7-1500 CPU 1516-3 | ||
Siemens SIMATIC S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1516-3 DP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1516-3 DP Firmware | ||
Siemens SIMATIC S7-1516-3 PN/DP CPU | ||
Siemens SIMATIC S7-1500 CPU 1516-3 | ||
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP | ||
Siemens SIMATIC S7-1516F-3 PN/DP CPU | ||
Siemens SIMATIC S7-1516F-3 PN/DP CPU | ||
Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP Firmware | ||
Siemens SIMATIC S7-1500 CPU 1516f-3 PN/DP | ||
Siemens SIMATIC S7-1500 CPU 1516PRO F Firmware | ||
Siemens SIMATIC S7-1500 CPU 1516PRO F-2 PN | ||
Siemens SIMATIC S7-1500 CPU 1516PRO-2 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1516pro-2 PN | ||
Siemens Simatic S7-1500 CPU 1516T-3 | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1516TF-3 Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1517-3 PN Firmware | ||
Siemens SIMATIC S7-1517-3 PN/DP CPU | ||
Siemens SIMATIC S7-1500 CPU 1517-3 DP | ||
Siemens SIMATIC S7-1517-3 PN/DP CPU | ||
Siemens SIMATIC S7-1500 CPU 1517-3 PN | ||
Siemens SIMATIC S7-1517-3 PN/DP CPU | ||
siemens SIMATIC S7-1500 CPU 1517-3 pn/dp firmware | ||
Siemens SIMATIC S7-1500 CPU 1517-3 PN/DP | ||
Siemens SIMATIC S7-1500 CPU 1517F-3 | ||
Siemens SIMATIC S7-1500 CPU 1517F-3 Firmware | ||
siemens SIMATIC S7-1500 CPU 1517f-3 pn/dp firmware | ||
Siemens SIMATIC S7-1500 CPU 1517f-3 PN/DP | ||
Siemens SIMATIC S7-1500 T Firmware | ||
Siemens SIMATIC S7-1500 CPU 1517TF-3 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1518F-4 | ||
Siemens S7-1500 | ||
Siemens SIMATIC S7-1518-4 PN/DP CPU | ||
Siemens SIMATIC S7-1500 | ||
Siemens Simatic S7-1500 CPU 1518-4 DP | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP Firmware | ||
Siemens SIMATIC CPU 1518-4 | ||
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP Firmware | ||
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP | ||
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP | ||
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP | ||
Siemens SIMATIC S7-1500 CPU 1518F-4 | ||
Siemens SIMATIC S7-1518F-4 PN/DP CPU | ||
Siemens SIMATIC S7-1500 CPU 1518f-4 pn/dp firmware | ||
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP | ||
Siemens SIMATIC S7-1500 CPU 1518-4 Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens Simatic S7-1500 CPU 1518T-4 PN/DP Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 1518T-4 Firmware | ||
Siemens Simatic S7-1500 | ||
Siemens SIMATIC S7-1500 CPU 15PROF-2 Firmware | ||
Siemens SIMATIC S7-1500 CPU 15PRO-2 Firmware | ||
Siemens Simatic S7-1500 CPU 15PROF-2 | ||
Siemens SIMATIC S7-1500 CPU 15PROF-2 Firmware | ||
Siemens Simatic S7-1500 CPU 1513Pro-2 | ||
Siemens Simatic S7-1500 CPU 1513Pro-2 | ||
Siemens SIMATIC S7-1500 CPU 1513PROF-2 Firmware | ||
Siemens SIMATIC S7-1500 CPU 1513PROF-2 Firmware | ||
Siemens Simatic S7-1200 CPU 1211C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1211C | ||
Siemens SIMATIC S7-1200 CPU 1212C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1212C | ||
Siemens SIMATIC S7-1200 CPU 1212FC Firmware | ||
Siemens SIMATIC S7-1200 CPU 1212FC | ||
Siemens SIMATIC S7-1200 CPU 1214C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1214C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1214FC Firmware | ||
Siemens SIMATIC S7-1200 CPU 1214FC | ||
Siemens SIMATIC S7-1200 CPU 1215C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1215C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1215FC Firmware | ||
Siemens SIMATIC S7-1200 CPU 1215FC Firmware | ||
Siemens SIMATIC S7-1200 CPU 1217C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1217C | ||
Siemens S7-1200 CPU 1211C Firmware | ||
Siemens Simatic S7-1200 CPU 1211C Firmware | ||
Siemens S7-1200 CPU 1212C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1212C Firmware | ||
Siemens S7-1200 CPU 1212FC Firmware | ||
Siemens S7-1200 CPU 1212FC | ||
Siemens SIMATIC S7-1200 CPU 1214C Firmware | ||
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly | ||
Siemens S7-1200 CPU 1214C Firmware | ||
Siemens SIMATIC S7-1200 CPU | ||
Siemens S7-1200 CPU 1214FC Firmware | ||
Siemens SIMATIC S7-1200 CPU 1214FC Firmware | ||
Siemens Simatic S7-1200 CPU Firmware | ||
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC | ||
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC | ||
Siemens CPU 1215C | ||
Siemens Simatic S7-1200 CPU Firmware | ||
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC | ||
Siemens S7-1200 CPU 1217C Firmware | ||
Siemens S7-1200 CPU 1217C |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-30694 is significant due to its potential to allow authenticated remote attackers to execute cross-site request forgery attacks.
To fix CVE-2022-30694, ensure proper origin checking is implemented in the /FormLogin endpoint of the affected web services.
CVE-2022-30694 affects multiple Siemens software products including varying versions of SIMATIC S7-1500, WinCC Runtime, and others.
Yes, CVE-2022-30694 can be exploited remotely by authenticated attackers.
The potential impact of CVE-2022-30694 includes the ability for attackers to track activities of other users through login cross-site request forgery attacks.