CVE-2022-34820

Name: CVE-2022-34820
Creator: NVD / NIST
Published: 2022-07-12T10:15:12.343+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.4/10EPSS 1.65%

Last modified Jun 17, 2026

CVE-2022-34820 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). The application does not correctly escape some user provided fields during the authentication process. EPSS estimates a 1.65% chance of exploitation in the next 30 days.

Description

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). The application does not correctly escape some user provided fields during the authentication process. This could allow an attacker to inject custom commands and execute arbitrary code with elevated privileges.

Metrics

CVSS 3.1

8.4/10

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Probability

1.65%

73.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Siemens	Simatic Cp 1242-7 V2 Firmware	< 3.3.46
Siemens	Simatic Cp 1243-1 Firmware	< 3.3.46
Siemens	Simatic Cp 1243-7 Lte Eu Firmware	< 3.3.46
Siemens	Simatic Cp 1243-7 Lte Us Firmware	< 3.3.46
Siemens	Simatic Cp 1243-8 Irc Firmware	< 3.3.46
Siemens	Simatic Cp 1542sp-1 Irc Firmware	>= 2.0, < 2.2.28
Siemens	Simatic Cp 1543-1 Firmware	< 3.0.22
Siemens	Simatic Cp 1543sp-1 Firmware	>= 2.0, < 2.2.28
Siemens	Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail Firmware	>= 2.0, < 2.2.28
Siemens	Siplus Et 200sp Cp 1543sp-1 Isec Firmware	>= 2.0, < 2.2.28
Siemens	Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail Firmware	>= 2.0, < 2.2.28
Siemens	Siplus Net Cp 1242-7 V2 Firmware	< 3.3.46
Siemens	Siplus Net Cp 1543-1 Firmware	< 3.0.22
Siemens	Siplus S7-1200 Cp 1243-1 Firmware	< 3.3.46
Siemens	Siplus S7-1200 Cp 1243-1 Rail Firmware	< 3.3.46

References

https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdfPatch, Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdfPatch, Vendor Advisory

Timeline

Published: Jul 12, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-34820?

How severe is CVE-2022-34820?

CVE-2022-34820 has a CVSS score of 8.4/10 (HIGH severity). The EPSS model estimates a 1.65% probability of exploitation in the next 30 days.

How do I fix CVE-2022-34820?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-34820?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST