ICSA-23-194-04 · Published 2025-05-06 · View on CISA ICS-CERT ↗

Siemens SIMATIC MV500 Devices

CVSS 9.8 CRITICAL

CVEs (13)

CVE-2021-46828 CVE-2022-1012 CVE-2022-4304 CVE-2022-4450 CVE-2022-30767 CVE-2022-36946 CVE-2022-37434 CVE-2022-48285 CVE-2023-0215 CVE-2023-0286 CVE-2023-35920 CVE-2023-35921 CVE-2023-36521

Remediations

Update to V3.3.4 or later version

Affected Vendors

Siemens

Affected Products (6)

Siemens · SIMATIC MV540 H (6GF3540-0GE10) <V3.3.4

Siemens · SIMATIC MV540 S (6GF3540-0CD10) <V3.3.4

Siemens · SIMATIC MV550 H (6GF3550-0GE10) <V3.3.4

Siemens · SIMATIC MV550 S (6GF3550-0CD10) <V3.3.4

Siemens · SIMATIC MV560 U (6GF3560-0LE10) <V3.3.4

Siemens · SIMATIC MV560 X (6GF3560-0HE10) <V3.3.4

Affected Sectors

Multiple

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more