CVEvulnerability

CVE-2022-30694

6.5 MEDIUM Published 2022-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-352

Description

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.

Affected configurations

• siemens simatic s7-1500 software controller • siemens simatic s7-plcsim advanced • siemens simatic wincc runtime • siemens 6es7154-8fb01-0ab0 firmware (< 3.2.19) • siemens 6es7154-8ab01-0ab0 firmware (< 3.2.19) • siemens 6es7154-8fx00-0ab0 firmware (< 3.2.19) • siemens 6es7151-8ab01-0ab0 firmware (< 3.2.19) • siemens 6es7151-8fb01-0ab0 firmware (< 3.2.19) • siemens 6es7314-6eh04-0ab0 firmware (< 3.3.19) • siemens 6es7315-2eh14-0ab0 firmware (< 3.2.19) • siemens 6es7315-2fj14-0ab0 firmware (< 3.2.19) • siemens 6es7315-7tj10-0ab0 firmware (< 3.2.19) • siemens 6es7317-2ek14-0ab0 firmware (< 3.2.19) • siemens 6es7317-2fk14-0ab0 firmware (< 3.2.19) • siemens 6es7317-7tk10-0ab0 firmware (< 3.2.19) • siemens 6es7317-7ul10-0ab0 firmware (< 3.2.19) • siemens 6es7318-3el01-0ab0 firmware (< 3.2.19) • siemens 6es7318-3fl01-0ab0 firmware (< 3.2.19) • siemens 6ag1151-8ab01-7ab0 firmware (< 3.2.19) • siemens 6ag1151-8fb01-2ab0 firmware (< 3.2.19) • siemens 6ag1314-6eh04-7ab0 firmware (< 3.3.19) • siemens 6ag1315-2eh14-7ab0 firmware (< 3.2.19) • siemens 6ag1315-2fj14-2ab0 firmware (< 3.2.19) • siemens 6ag1317-2ek14-7ab0 firmware (< 3.2.19) • siemens 6ag1317-2fk14-2ab0 firmware (< 3.2.19) • siemens sinumerik one firmware • siemens simatic pcs firmware (<= 2.1) • siemens simatic drive controller cpu 1504d tf firmware • siemens simatic drive controller cpu 1507d tf firmware • siemens simatic s7-400 pn\/dp v7 firmware • siemens simatic s7-400 pn\/dp v6 firmware • siemens simatic s7-1500 cpu 1507s firmware • siemens simatic s7-1500 cpu 1507s f firmware • siemens simatic s7-1500 cpu 1508s firmware • siemens simatic s7-1500 cpu 1508s f firmware • siemens simatic s7-1500 cpu 1510sp firmware • siemens simatic s7-1500 cpu 1510sp-1 firmware • siemens simatic s7-1500 cpu 1511-1 firmware • siemens simatic s7-1500 cpu 1511-1 pn firmware • siemens simatic s7-1500 cpu 1511c firmware • siemens simatic s7-1500 cpu 1511c-1 firmware • siemens simatic s7-1500 cpu 1511f-1 firmware • siemens simatic s7-1500 cpu 1511f-1 pn firmware • siemens simatic s7-1500 cpu 1511t-1 firmware • siemens simatic s7-1500 cpu 1511tf-1 firmware • siemens simatic s7-1500 cpu 1512c firmware • siemens simatic s7-1500 cpu 1512c-1 firmware • siemens simatic s7-1500 cpu 1512sp-1 firmware • siemens simatic s7-1500 cpu 1512spf-1 firmware • siemens simatic s7-1500 cpu 1513-1 firmware • siemens simatic s7-1500 cpu 1513-1 pn firmware • siemens simatic s7-1500 cpu 1513f-1 firmware • siemens simatic s7-1500 cpu 1513f-1 pn firmware • siemens simatic s7-1500 cpu 1513r-1 firmware • siemens simatic s7-1500 cpu 151511c-1 firmware • siemens simatic s7-1500 cpu 151511f-1 firmware • siemens simatic s7-1500 cpu 1515-2 firmware • siemens simatic s7-1500 cpu 1515-2 pn firmware • siemens simatic s7-1500 cpu 1515f-2 firmware • siemens simatic s7-1500 cpu 1515f-2 pn firmware … and 53 more

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References