A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19).

published 2023-12-12 2 y ago modified 2026-06-17 4 mo ago also EUVD-2022-48979

cvss: 4.2; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.1%; EPSS 0.1% chance of exploitation in 30 days, percentile 3%
public exploits: 0; none known

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware configuration of the affected application.

Patch / fix

fixed in 1

siemens simatic_step_7 19

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-348-07 updated 2023-12-12 cvss 4.2

Siemens SIMATIC STEP 7 (TIA Portal)

Siemens SIMATIC STEP 7 (TIA Portal) <V19
affected: fixed in V19

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 23 mo ago (2024-11-25)

Exploit prediction

0.14% chance of exploitation in the next 30 days, higher than 3% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	4.2	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CNA	3.1	4.2	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Siemens SIMATIC STEP 7 (TIA Portal)

Classification

Weakness

CWE-316 Cleartext Storage of Sensitive Information in Memory
CWE-312 Cleartext Storage of Sensitive Information

References

cert-portal.siemens.com /productcert/pdf/ssa-887801.pdf
vendor-advisory

Sources

CVE List CVE-2022-46141
NVD CVE-2022-46141

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary