CVE-2022-33138: Siemens SIMATIC MV540 H Firmware

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIMATIC MV550 S (All versions < V3.3), SIMATIC MV560 U (All versions < V3.3), SIMATIC MV560 X (All versions < V3.3). Affected devices do not perform authentication for several web API endpoints. This could allow an unauthenticated remote attacker to read and download data from the device.

Affected products

• Siemens SIMATIC MV540 H Firmware: before 3.3 (fixed in 3.3)
• Siemens SIMATIC MV540 S Firmware: before 3.3 (fixed in 3.3)
• Siemens SIMATIC MV550 H Firmware: before 3.3 (fixed in 3.3)
• Siemens SIMATIC MV550 S Firmware: before 3.3 (fixed in 3.3)
• Siemens SIMATIC MV560 U Firmware: before 3.3 (fixed in 3.3)
• Siemens SIMATIC MV560 X Firmware: before 3.3 (fixed in 3.3)

Published 2022-07-12. Last modified 2026-06-17.