{"id":"CVE-2022-33137","aliases":["EUVD-2022-36188","GHSA-jp3h-x882-5crh"],"status":"published","title":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S ...","description":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00864,"percentile":0.58894,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-613"],"published":"2022-07-12T10:06:44Z","modified":"2026-06-17T04:48:29Z","products":[{"vendor":"siemens","product":"simatic mv540 h"},{"vendor":"siemens","product":"simatic mv540 s"},{"vendor":"siemens","product":"simatic mv550 h"},{"vendor":"siemens","product":"simatic mv550 s"},{"vendor":"siemens","product":"simatic mv560 u"},{"vendor":"siemens","product":"simatic mv560 x"},{"vendor":"siemens","product":"simatic_mv540_h_firmware"},{"vendor":"siemens","product":"simatic_mv540_s_firmware"},{"vendor":"siemens","product":"simatic_mv550_h_firmware"},{"vendor":"siemens","product":"simatic_mv550_s_firmware"},{"vendor":"siemens","product":"simatic_mv560_u_firmware"},{"vendor":"siemens","product":"simatic_mv560_x_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-348662.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33137"},{"url":"https://github.com/advisories/GHSA-jp3h-x882-5crh"}],"sources":{"cve":[{"id":"CVE-2022-33137","description":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.","status":"published","published":"2022-07-12T10:06:44Z","modified":"2024-08-03T08:01:19.904Z","cwes":["CWE-613"],"updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36188","description":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.","status":"published","published":"2022-07-12T10:06:44Z","modified":"2024-08-03T08:01:19Z","updated_at":"2026-11-03T03:25:31.011886Z"}],"ghsa":[{"id":"GHSA-jp3h-x882-5crh","title":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S ...","description":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.","status":"published","published":"2022-07-13T00:01:56Z","modified":"2023-01-27T05:05:48Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:42:46.0541Z"}],"nvd":[{"id":"CVE-2022-33137","description":"A vulnerability has been identified in SIMATIC MV540 H (All versions \u003c V3.3), SIMATIC MV540 S (All versions \u003c V3.3), SIMATIC MV550 H (All versions \u003c V3.3), SIMATIC MV550 S (All versions \u003c V3.3), SIMATIC MV560 U (All versions \u003c V3.3), SIMATIC MV560 X (All versions \u003c V3.3). The web session management of affected devices does not invalidate session ids in certain logout scenarios. This could allow an authenticated remote attacker to hijack other users' sessions.","status":"published","published":"2022-07-12T10:15:10.707Z","modified":"2026-06-17T04:48:29.28Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:07:23.322724Z"}]}}