A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf | Mitigation Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Apr 2022, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf - Mitigation, Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 7.8
v3 : 7.5 |
| CWE | CWE-400 | |
| CPE | cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:16:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinetplan:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:15.1:-:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:15:*:*:*:*:*:*:* cpe:2.3:a:siemens:simatic_pcs_neo:3.1:-:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:* |
12 Apr 2022, 09:39
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-12 09:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-27194
Mitre link : CVE-2022-27194
CVE.ORG link : CVE-2022-27194
JSON object : View
Products Affected
siemens
- sinetplan
- totally_integrated_automation_portal
- simatic_pcs_neo
CWE
CWE-400
Uncontrolled Resource Consumption