CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It may be remotely exploitable.
CVE
CVE-2021-44222
Severity
CRITICAL
CVSS
9.1
EPSS
1.27%
Original NVD Description
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)