CVE-2021-37172

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-08-10 · updated 2026-06-17
Weakness: CWE-287

Description

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

Affected products

Siemens Simatic S7-1200 Cpu Firmware: 4.5.0
Siemens AG SIMATIC STEP 7 (TIA Portal): through 13.0

References

https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf

Get alerted when CVE-2021-37172 or the next vulnerability affects your stack