Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal) by Siemens

CVE-2022-46141

What is CVE-2022-46141?

An information disclosure issue has been found in SIMATIC STEP 7 (TIA Portal), affecting all versions prior to V19. This flaw allows a local attacker to access the access level password of the SIMATIC S7-1200 and S7-1500 CPUs. The vulnerability is triggered when a legitimate user enters their password during hardware configuration, potentially exposing sensitive credentials to unauthorized individuals.

References