CVE-2022-30694Network attack vector

User activity tracking via forged login requests

Published Nov 8, 2022 · Updated Apr 21, 2025

Cross-site request forgery in Siemens industrial web services allows remote authenticated users to track other users' activities. The /FormLogin endpoint accepts login requests without validating their origin, allowing a forged login to associate a victim's browser with an attacker-controlled session. Exploitation requires an authenticated attacker and user interaction; the reported consequence is activity tracking, not data modification or service interruption.

CVSS severity6.5
Medium
EPSS probability0.31%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Cross-site request forgery in Siemens industrial web services allows remote authenticated users to track other users' activities. The /FormLogin endpoint accepts login requests without validating their origin, allowing a forged login to associate a victim's browser with an attacker-controlled session. Exploitation requires an authenticated attacker and user interaction; the reported consequence is activity tracking, not data modification or service interruption.

The record

CVE
CVE-2022-30694
Published
Nov 8, 2022
Updated
Apr 21, 2025
Vendor
Siemens
Product
SIMATIC ET 200S IM151-8F PN/DP CPU
Classifications
CWE-352
Attack vector
network
Privileges
authenticated

Timeline

How it unfolded

  1. Nov 8, 2022CVE publishedPublication date reported by the CVE source.
  2. Apr 21, 2025Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=All versions < V3.2.19

What conditions does exploitation require?

Attack vectornetwork
Required privilegesauthenticated

What is affected?

Siemens · SIMATIC ET 200S IM151-8F PN/DP CPUversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1518T-4 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1512SP-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1515T-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 ET 200pro: CPU 1516PRO F-2 PNversion=All versions < V2.9.7
Siemens · SIPLUS ET 200SP CPU 1510SP-1 PN RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-300 CPU 317T-3 PN/DPversion=All versions < V3.2.19
Siemens · SIPLUS ET 200SP CPU 1510SP F-1 PN RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1517F-3 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 ET 200pro: CPU 1513PRO F-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU S7-1518-4 PN/DP ODKversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1517TF-3 PN/DPversion=All versions < V3.0.1
Siemens · SIPLUS S7-300 CPU 314C-2 PN/DPversion=All versions < V3.3.19
Siemens · SIPLUS S7-1500 CPU 1516F-3 PN/DP RAILversion=All versions < V2.9.7
Siemens · SIMATIC PC Stationversion=All versions >= V2.1
Siemens · SIMATIC WinCC Runtime Advancedversion=All versions < V17 Update 5
Siemens · SIMATIC S7-300 CPU 319-3 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 Software Controller V2version=All versions < V21.9.7
Siemens · SIPLUS S7-1500 CPU 1518-4 PN/DP MFPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1516-3 PN/DPversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1516-3 PN/DP RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1518TF-4 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-300 CPU 314C-2 PN/DPversion=All versions < V3.3.19
Siemens · SIMATIC S7-1500 CPU 1517H-3 PNversion=All versions < V3.0.1
Siemens · SIPLUS ET 200SP CPU 1510SP F-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC ET 200SP Open Controller CPU 1515SP PC2version=All versions < V21.9.7
Siemens · SIMATIC S7-1500 CPU 1512SP F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1511F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1518F-4 PN/DPversion=All versions < V3.0.1
Siemens · SIPLUS S7-1500 CPU 1518HF-4 PNversion=All versions < V3.0.1
Siemens · SIPLUS S7-300 CPU 315F-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1511TF-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC ET 200pro IM154-8FX PN/DP CPUversion=All versions < V3.2.19
Siemens · SIPLUS ET 200SP CPU 1512SP F-1 PN RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1513-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC Drive Controller CPU 1507D TFversion=All versions < V2.9.7
Siemens · SIMATIC S7-300 CPU 319F-3 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1516F-3 PN/DPversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 ET 200pro: CPU 1513PRO-2 PNversion=All versions < V2.9.7
Siemens · SIPLUS S7-300 CPU 317F-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU S7-1518F-4 PN/DP ODKversion=All versions < V2.9.7
Siemens · SIMATIC S7-300 CPU 315F-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1511T-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-400 PN/DP V6 CPU familyversion=All versions
Siemens · SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPversion=All versions < V3.0.1
Siemens · SIPLUS S7-1500 CPU 1511-1 PN T1 RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1511-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS ET 200S IM151-8F PN/DP CPUversion=All versions < V3.2.19
Siemens · SIPLUS S7-1500 CPU 1511F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS ET 200SP CPU 1512SP-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-PLCSIM Advancedversion=All versions < V5.0
Siemens · SIPLUS S7-1500 CPU 1511-1 PN TX RAILversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1515F-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-400 PN/DP V7 CPU familyversion=All versions
Siemens · SIPLUS S7-1500 CPU 1518-4 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1513F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1516T-3 PN/DPversion=All versions < V3.0.1
Siemens · SIPLUS S7-1500 CPU 1517H-3 PNversion=All versions < V3.0.1
Siemens · SIPLUS ET 200S IM151-8 PN/DP CPUversion=All versions < V3.2.19
Siemens · SIPLUS S7-1500 CPU 1513-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1516F-3 PN/DPversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1513F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-300 CPU 315T-3 PN/DPversion=All versions < V3.2.19
Siemens · SIPLUS S7-1500 CPU 1516-3 PN/DPversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1518F-4 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1512C-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC ET 200S IM151-8 PN/DP CPUversion=All versions < V3.2.19
Siemens · SINUMERIK ONEversion=All versions < V6.22
Siemens · SIMATIC S7-1500 CPU 1513R-1 PNversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1511-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC ET 200pro IM154-8F PN/DP CPUversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1518HF-4 PNversion=All versions < V3.0.1
Siemens · SIMATIC S7-300 CPU 315-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1515F-2 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIPLUS S7-300 CPU 315-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DPversion=All versions < V3.0.1
Siemens · SIPLUS ET 200SP CPU 1512SP-1 PN RAILversion=All versions < V2.9.7
Siemens · SIMATIC Drive Controller CPU 1504D TFversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1516-3 PN/DP TX RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-300 CPU 317F-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-300 CPU 317TF-3 PN/DPversion=All versions < V3.2.19
Siemens · SIPLUS ET 200SP CPU 1510SP-1 PNversion=All versions < V2.9.7
Siemens · SIPLUS S7-300 CPU 317-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1517T-3 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1511C-1 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1510SP-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1200 CPU Familyversion=All versions < V4.6.0
Siemens · SIMATIC S7-300 CPU 317-2 PN/DPversion=All versions < V3.2.19
Siemens · SIMATIC S7-1500 CPU 1515-2 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC ET 200pro IM154-8 PN/DP CPUversion=All versions < V3.2.19
Siemens · SIPLUS S7-1500 CPU 1515F-2 PN RAILversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DP MFPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 CPU 1515R-2 PNversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1515R-2 PN TX RAILversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1515F-2 PN T2 RAILversion=All versions < V2.9.7
Siemens · SIPLUS S7-1500 CPU 1515R-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1515TF-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1516TF-3 PN/DPversion=All versions < V3.0.1
Siemens · SIMATIC S7-1500 ET 200pro: CPU 1516PRO-2 PNversion=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1517-3 PN/DPversion=All versions < V3.0.1
Siemens · SIPLUS ET 200SP CPU 1512SP F-1 PNversion=All versions; version=All versions < V2.9.7
Siemens · SIMATIC S7-1500 CPU 1510SP F-1 PNversion=All versions; version=All versions < V2.9.7

Published CVSS scores

3.5NIST NVDCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
6.5Siemens AGCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 9, 2026Sep 15, 2026
Latest reporting daySep 15, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectornetwork
Privilegesauthenticated
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-352Cross-Site Request Forgery (CSRF)

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo