A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00038.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Siemens SIMATIC STEP 7 (TIA Portal) V15 affected
Version Status Constraints
All versions affected —
Siemens SIMATIC STEP 7 (TIA Portal) V16 affected
Version Status Constraints
All versions < V16 Update 5 affected —
Siemens SIMATIC STEP 7 (TIA Portal) V17 affected
Version Status Constraints
All versions < V17 Update 2 affected —

Configuration 1 [-]

AND
OR cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:16:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:16:update1:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:16:update2:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:16:update3:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:16:update4:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:17:-:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_step_7:17:update1:*:*:*:*:*:*
OR cpe:2.3:h:siemens:simatic_s7-1200_cpu:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215_fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215fc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1507s:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1507s_f:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1508s:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1508s_f:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1510sp-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511-1_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511c-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511f-1_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511t-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1511tf-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512c-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512sp-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1512spf-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513-1_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513f-1_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1513r-1:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515-2_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515f-2_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515r-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515t-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1515tf-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516-3_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516f-3_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro-2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516pro_f:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516t-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1516tf-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517-3_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517f-3_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1517tf-3:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518hf-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518t-4:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518tf-4:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Siemens Subscribe
Simatic S7-1200 Cpu Subscribe
Simatic S7-1200 Cpu 1211c Subscribe
Simatic S7-1200 Cpu 1212c Subscribe
Simatic S7-1200 Cpu 1212fc Subscribe
Simatic S7-1200 Cpu 1214 Fc Subscribe
Simatic S7-1200 Cpu 1214c Subscribe
Simatic S7-1200 Cpu 1214fc Subscribe
Simatic S7-1200 Cpu 1215 Fc Subscribe
Simatic S7-1200 Cpu 1215c Subscribe
Simatic S7-1200 Cpu 1215fc Subscribe
Simatic S7-1200 Cpu 1217c Subscribe
Simatic S7-1500 Cpu Subscribe
Simatic S7-1500 Cpu 1507s Subscribe
Simatic S7-1500 Cpu 1507s F Subscribe
Simatic S7-1500 Cpu 1508s Subscribe
Simatic S7-1500 Cpu 1508s F Subscribe
Simatic S7-1500 Cpu 1510sp Subscribe
Simatic S7-1500 Cpu 1510sp-1 Subscribe
Simatic S7-1500 Cpu 1511-1 Subscribe
Simatic S7-1500 Cpu 1511-1 Pn Subscribe
Simatic S7-1500 Cpu 1511c Subscribe
Simatic S7-1500 Cpu 1511c-1 Subscribe
Simatic S7-1500 Cpu 1511f-1 Subscribe
Simatic S7-1500 Cpu 1511f-1 Pn Subscribe
Simatic S7-1500 Cpu 1511t-1 Subscribe
Simatic S7-1500 Cpu 1511tf-1 Subscribe
Simatic S7-1500 Cpu 1512c Subscribe
Simatic S7-1500 Cpu 1512c-1 Subscribe
Simatic S7-1500 Cpu 1512sp-1 Subscribe
Simatic S7-1500 Cpu 1512spf-1 Subscribe
Simatic S7-1500 Cpu 1513-1 Subscribe
Simatic S7-1500 Cpu 1513-1 Pn Subscribe
Simatic S7-1500 Cpu 1513f-1 Subscribe
Simatic S7-1500 Cpu 1513f-1 Pn Subscribe
Simatic S7-1500 Cpu 1513r-1 Subscribe
Simatic S7-1500 Cpu 1515-2 Subscribe
Simatic S7-1500 Cpu 1515-2 Pn Subscribe
Simatic S7-1500 Cpu 1515f-2 Subscribe
Simatic S7-1500 Cpu 1515f-2 Pn Subscribe
Simatic S7-1500 Cpu 1515r-2 Subscribe
Simatic S7-1500 Cpu 1515t-2 Subscribe
Simatic S7-1500 Cpu 1515tf-2 Subscribe
Simatic S7-1500 Cpu 1516-3 Subscribe
Simatic S7-1500 Cpu 1516-3 Dp Subscribe
Simatic S7-1500 Cpu 1516-3 Pn Subscribe
Simatic S7-1500 Cpu 1516-3 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1516f-3 Subscribe
Simatic S7-1500 Cpu 1516f-3 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1516pro-2 Subscribe
Simatic S7-1500 Cpu 1516pro F Subscribe
Simatic S7-1500 Cpu 1516t-3 Subscribe
Simatic S7-1500 Cpu 1516tf-3 Subscribe
Simatic S7-1500 Cpu 1517-3 Subscribe
Simatic S7-1500 Cpu 1517-3 Dp Subscribe
Simatic S7-1500 Cpu 1517-3 Pn Subscribe
Simatic S7-1500 Cpu 1517-3 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1517f-3 Subscribe
Simatic S7-1500 Cpu 1517f-3 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1517tf-3 Subscribe
Simatic S7-1500 Cpu 1518 Subscribe
Simatic S7-1500 Cpu 1518-4 Subscribe
Simatic S7-1500 Cpu 1518-4 Dp Subscribe
Simatic S7-1500 Cpu 1518-4 Pn Subscribe
Simatic S7-1500 Cpu 1518-4 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1518-4 Pn\/dp Mfp Subscribe
Simatic S7-1500 Cpu 1518f-4 Subscribe
Simatic S7-1500 Cpu 1518f-4 Pn\/dp Subscribe
Simatic S7-1500 Cpu 1518hf-4 Subscribe
Simatic S7-1500 Cpu 1518t-4 Subscribe
Simatic S7-1500 Cpu 1518tf-4 Subscribe
Simatic Step 7 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2021-29017 A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://cert-portal.siemens.com/productcert/pdf/ssa-350757.pdf cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2024-08-04T03:22:25.804Z

Reserved: 2021-10-06T00:00:00

Link: CVE-2021-42029

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-04-12T09:15:13.817

Modified: 2024-11-21T06:27:06.913

Link: CVE-2021-42029

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses