Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-10002
HistoryFeb 08, 2022 - 12:00 a.m.

Multiple Siemens Industrial Products Denial of Service Vulnerabilities (CNVD-2022-10002)

2022-02-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

SIMATIC Drive Controller family products are machines designed for production automation, combining the functions of SIMATIC S7-1500 CPUs and SINAMICS S120 drive controls.SIMATIC S7-1200 CPU family products are designed for discrete and continuous control in industrial environments, such as SIMATIC S7-1500 CPU family products are designed for discrete and continuous control in industrial environments, such as global manufacturing, food and beverage, and chemical industries. SIMATIC S7-PLCSIM Advanced emulates the S7-1200, S7-1500 and several other PLC derivatives. Includes full network access to emulated PLCs, even in virtualized environments.SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices.SIMATIC ET 200SP Open Controller is a PC-based version of the SIMATIC S7-1500 controller that includes optional visualization functions and central I/O in a compact device. TIM 1531 IRC is a communication module. A denial-of-service vulnerability exists in several Siemens industrial products, which can be exploited by attackers to cause a denial-of-service situation in PLCs.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

Related for CNVD-2022-10002