[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbVTkSlpjzJjckm3hU4y343IFsBCt-xRYmKpRrvh2CbI":3,"g5a-risk:CVE-2021-37172":159},{"success":4,"data":5,"meta":157},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":77,"referencesCount":84,"weaknesses":85,"weaknessesCount":84,"isActivelyExploited":94,"cisaInfo":26,"otxData":26,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":155,"notableEvents":156},"CVE-2021-37172","What is CVE-2021-37172?","A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.","A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured ...","2021-08-10T11:15:09.28","2022-07-01T17:44:35.163",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.00922,[39,39,39,39,39,39,39],"High",[43,48,52,55,58,61,64,67,70,73],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"siemens","simatic_s7-1200_cpu_firmware","4.5.0","cpe:2.3:o:siemens:simatic_s7-1200_cpu_firmware:4.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"cpu_1211c","-","cpe:2.3:h:siemens:cpu_1211c:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":50,"criteria":54,"vulnerable":4},"cpu_1212c","cpe:2.3:h:siemens:cpu_1212c:-:*:*:*:*:*:*:*",{"vendor":44,"product":56,"version":50,"criteria":57,"vulnerable":4},"cpu_1212fc","cpe:2.3:h:siemens:cpu_1212fc:-:*:*:*:*:*:*:*",{"vendor":44,"product":59,"version":50,"criteria":60,"vulnerable":4},"cpu_1214c","cpe:2.3:h:siemens:cpu_1214c:-:*:*:*:*:*:*:*",{"vendor":44,"product":62,"version":50,"criteria":63,"vulnerable":4},"cpu_1214fc","cpe:2.3:h:siemens:cpu_1214fc:-:*:*:*:*:*:*:*",{"vendor":44,"product":65,"version":50,"criteria":66,"vulnerable":4},"cpu_1215c","cpe:2.3:h:siemens:cpu_1215c:-:*:*:*:*:*:*:*",{"vendor":44,"product":68,"version":50,"criteria":69,"vulnerable":4},"cpu_1215fc","cpe:2.3:h:siemens:cpu_1215fc:-:*:*:*:*:*:*:*",{"vendor":44,"product":71,"version":50,"criteria":72,"vulnerable":4},"cpu_1217c","cpe:2.3:h:siemens:cpu_1217c:-:*:*:*:*:*:*:*",{"vendor":44,"product":74,"version":75,"criteria":76,"vulnerable":4},"simatic_step_7_\\(tia_portal\\)","*","cpe:2.3:a:siemens:simatic_step_7_\\(tia_portal\\):*:*:*:*:*:*:*:*",[78],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-830194.pdf","Siemens",[82,83],"Patch","Vendor Advisory",1,[86],{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":93},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2021-37172? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-37172, a high severity cyber security vulnerability from 2021. A vulnerability has been identified in SIMATIC S7-1200 CPU ...","CVE-2021-37172, CVE-2021-37172 vulnerability, CVE-2021-37172 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, siemens security, simatic_s7-1200_cpu_firmware vulnerability, cpu_1211c vulnerability, cpu_1212c vulnerability, cpu_1212fc vulnerability, cpu_1214c vulnerability","\u002Fwhat-is\u002Fcve-2021-37172",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-37172","Cybersecurity","CVE-2021-37172, CVE-2021-37172 vulnerability, CVE-2021-37172 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122,148],{"Operator":123,"Negate":26,"Nodes":124},"AND",[125,130],{"Operator":126,"Negate":26,"CPEMatch":127},"OR",[128],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F6394ED6-C200-4673-882B-7FC2A4C89C42",{"Operator":126,"Negate":26,"CPEMatch":131},[132,134,136,138,140,142,144,146],{"Vulnerable":26,"Criteria":51,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"172D341B-D863-4C24-9B6E-633EBE87C8C9",{"Vulnerable":26,"Criteria":54,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1B475E4F-EE4F-4435-9F0B-8E4FA35377BE",{"Vulnerable":26,"Criteria":57,"MatchCriteriaID":137,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1402D624-5AF3-4E25-A2B0-9D9F214EE8FE",{"Vulnerable":26,"Criteria":60,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1F714315-8BEB-4BD3-BE59-C6649A0A105E",{"Vulnerable":26,"Criteria":63,"MatchCriteriaID":141,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2A988C9F-60DF-4BC5-A890-F03F445DD9BD",{"Vulnerable":26,"Criteria":66,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C90820D3-3F3E-4DC4-9DCE-A498CC26268D",{"Vulnerable":26,"Criteria":69,"MatchCriteriaID":145,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BAF22AB6-6DAA-4983-99DB-4F2A2E76856F",{"Vulnerable":26,"Criteria":72,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4C95F12D-563A-4915-9F26-A461EB4F8FA1",{"Operator":26,"Negate":26,"Nodes":149},[150],{"Operator":126,"Negate":26,"CPEMatch":151},[152],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":153,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":154},"8EA4509B-FC68-42FC-9CB6-ED3C3E65E153","13.0",[],[],{"lastModified":11,"cacheTime":158,"version":32},1792364934593,{"score":160,"band":161,"action":162,"scoredAt":163},47,"Medium","Plan remediation","2026-10-16T06:51:45.322718+00:00"]