CVE-2022-40225

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-40225
A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-337522.html Patch Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-337522.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:21

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 6.5
References () https://cert-portal.siemens.com/productcert/html/ssa-337522.html - Patch, Vendor Advisory () https://cert-portal.siemens.com/productcert/html/ssa-337522.html - Patch, Vendor Advisory

24 Jun 2024, 19:39

Type Values Removed Values Added
First Time Siemens
Siemens siplus Tim 1531 Irc Firmware
Siemens siplus Tim 1531 Irc
CVSS v2 : unknown
v3 : 6.5 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*
References () https://cert-portal.siemens.com/productcert/html/ssa-337522.html - () https://cert-portal.siemens.com/productcert/html/ssa-337522.html - Patch, Vendor Advisory

11 Jun 2024, 15:15

Type Values Removed Values Added
CWE CWE-681
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-337522.html -
Summary
  • (es) **RECHAZADA** NO UTILICE ESTE NÚMERO DE CANDIDATO. ID de consulta: ninguno. Motivo: Este candidato fue retirado por su CNA. Una investigación más exhaustiva demostró que no se trataba de un problema de seguridad. Notas: ninguna.
Summary (en) Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. (en) A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

10 Nov 2022, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-11-10 22:15

Updated : 2024-11-21 07:21

NVD link : CVE-2022-40225

Mitre link : CVE-2022-40225

CVE.ORG link : CVE-2022-40225

JSON object : View

Products Affected

siemens

  • siplus_tim_1531_irc
  • siplus_tim_1531_irc_firmware
CWE
CWE-681

Incorrect Conversion between Numeric Types