Critical SSA-655554 3 CVEs

SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1

Published Apr 12, 2022 · Updated Apr 12, 2022

Vendor: Siemens Product: SIMATIC Energy Manager Basic Product: SIMATIC Energy Manager PRO

Summary

SIMATIC Energy Manager is affected by multiple vulnerabilities that could allow an attacker to gain local privilege escalation, local code execution or remote code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

Unscored —

CVE-2022-23448

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager PRO SIMATIC Energy Manager Basic ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager PRO SIMATIC Energy Manager Basic ICS / OT

Apr 12, 2022
Unscored —

CVE-2022-23450 EPSS 36%

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Mana…

Siemens SIMATIC Energy Manager Basic SIMATIC Energy Manager PRO ICS / OT

Apr 12, 2022

Revision history

2022-04-12 #1
Publication Date

References

SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-655554.pdf
SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-655554.txt