CVE-2021-37172

HIGH

7.5

CVSS Score

Published: August 10, 2021 at 10:35 AM UTC

Updated: June 17, 2026 at 04:00 AM UTC

11 products affected across 1 vendorSIMATIC STEP 7 (TIA Portal)SIMATIC S7-1200 CPU FirmwareCpu 1211C

Using SIMATIC S7-1200 CPU family (incl. SIPLUS variants) by Siemens?

Get instant alerts when new vulnerabilities affect SIMATIC S7-1200 CPU family (incl. SIPLUS variants) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.9%

Description

A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

SIMATIC S7-1200 CPU Firmware · Siemens

95%

4.5.0

siemens-cpu-1211c (environment) · siemens-cpu-1212c (environment) · siemens-cpu-1212fc (environment) · siemens-cpu-1214c (environment) · siemens-cpu-1214fc (environment) · siemens-cpu-1215c (environment) · siemens-cpu-1215fc (environment) · siemens-cpu-1217c (environment)

SIMATIC STEP 7 (TIA Portal)· Siemens

95%

v ≤ 13.0

SIMATIC S7-1200 · Siemens

60%

4.5.0

Cpu 1211C · Siemensdevice

80%

All versions

Cpu 1212C · Siemensdevice

80%

All versions