CVE:CVE-2022-33138
CNNVD:CNNVD-202207-841
Siemens SIMATIC是西门子（Siemens）的一款组态软件。
Siemens SIMATIC MV540 H V3.3之前版本、SIMATIC MV540 S V3.3之前版本、SIMATIC MV550 H V3.3之前版本、SIMATIC MV550 S V3.3之前版本、SIMATIC MV560 U V3.3之前版本、SIMATIC MV560 X V3.3之前版本存在安全漏洞，该漏洞源于受影响的设备不会对多个Web API端点执行身份验证。这可能允许未经身份验证的远程攻击者从设备读取和下载数据。
solution:Upgrade siemens simatic_mv540_h_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv540_s_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv550_h_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv550_s_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv560_u_firmware to a higher version than 3.3,and avoid the version (,3.3); Upgrade siemens simatic_mv560_x_firmware to a higher version than 3.3,and avoid the version (,3.3)