CVE-2022-24287 vulnerability in Siemens Products
Published on May 20, 2022
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.
Weakness Type
Insecure Default Initialization of Resource
The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
Products Associated with CVE-2022-24287
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-24287 are published in these products:
Affected Versions
Siemens SIMATIC PCS 7 V8.2:- Version All versions is affected.
- Version All versions < V9.0 SP3 UC06 is affected.
- Version All versions < V9.1 SP1 UC01 is affected.
- Version All versions is affected.
- Version All versions < V17 Upd4 is affected.
- Version All versions is affected.
- Version All versions < V7.4 SP1 Update 21 is affected.
- Version All versions < V7.5 SP2 Update 8 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.