Siemens SIMATIC Easie Core Package vulnerabilities

3 CVEs affecting Siemens SIMATIC Easie Core Package, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30033, published 2025-08-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44221, published 2022-07-12. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing…
CVE-2021-44222, published 2022-07-12. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default…
CVE-2025-30033, published 2025-08-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected setup…