Description
A vulnerability has been identified in SIMATIC CP 1543-1 (incl. SIPLUS variants) (All versions < V3.0), SIMATIC CP 1545-1 (All versions < V1.1). An attacker with access to the subnet of the affected device could retrieve sensitive information stored in cleartext.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC CP 1543-1 (incl. SIPLUS variants) | All versions < V3.0 | — |
| Siemens | SIMATIC CP 1545-1 | All versions < V1.1 | — |
Advisories 2
- ICSA-21-257-06 Siemens SIMATIC CP (Update A) CISA ICS & IT advisories · Jun 14, 2022
- SSA-535997 SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products Siemens ProductCERT · Jun 14, 2022