Lucene search

[email protected]CVE-2022-40227

HistoryOct 11, 2022 - 11:15 a.m.

CVE-2022-40227

2022-10-1111:15:10

CWE-20

[email protected]

web.nvd.nist.gov

cve-2022-40227

simatic

hmi comfort panels

ktp mobile panels

denial of service

tcp

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

56.1%

JSON

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.

Affected configurations

NVD

Node

siemenssimatic_hmi_comfort_panels_firmwareRange<17.0

siemenssimatic_hmi_comfort_panels_firmwareMatch17.0-

siemenssimatic_hmi_comfort_panels_firmwareMatch17.0update1

siemenssimatic_hmi_comfort_panels_firmwareMatch17.0update2

siemenssimatic_hmi_comfort_panels_firmwareMatch17.0update3

AND

siemenssimatic_hmi_comfort_panelsMatch-

Node

siemenssimatic_hmi_ktp400_basic_firmwareRange<17.0

siemenssimatic_hmi_ktp400_basic_firmwareMatch17.0-

siemenssimatic_hmi_ktp400_basic_firmwareMatch17.0udpate1

siemenssimatic_hmi_ktp400_basic_firmwareMatch17.0update2

siemenssimatic_hmi_ktp400_basic_firmwareMatch17.0update3

siemenssimatic_hmi_ktp400_basic_firmwareMatch17.0update4

AND

siemenssimatic_hmi_ktp400_basicMatch-

Node

siemenssimatic_hmi_ktp700_basic_firmwareRange<17.0

siemenssimatic_hmi_ktp700_basic_firmwareMatch17.0-

siemenssimatic_hmi_ktp700_basic_firmwareMatch17.0udpate1

siemenssimatic_hmi_ktp700_basic_firmwareMatch17.0update2

siemenssimatic_hmi_ktp700_basic_firmwareMatch17.0update3

siemenssimatic_hmi_ktp700_basic_firmwareMatch17.0update4

AND

siemenssimatic_hmi_ktp700_basicMatch-

Node

siemenssimatic_hmi_ktp900_basic_firmwareRange<17.0

siemenssimatic_hmi_ktp900_basic_firmwareMatch17.0-

siemenssimatic_hmi_ktp900_basic_firmwareMatch17.0udpate1

siemenssimatic_hmi_ktp900_basic_firmwareMatch17.0update2

siemenssimatic_hmi_ktp900_basic_firmwareMatch17.0update3

siemenssimatic_hmi_ktp900_basic_firmwareMatch17.0update4

AND

siemenssimatic_hmi_ktp900_basicMatch-

Node

siemenssimatic_hmi_ktp1200_basic_firmwareRange<17.0

siemenssimatic_hmi_ktp1200_basic_firmwareMatch17.0-

siemenssimatic_hmi_ktp1200_basic_firmwareMatch17.0udpate1

siemenssimatic_hmi_ktp1200_basic_firmwareMatch17.0update2

siemenssimatic_hmi_ktp1200_basic_firmwareMatch17.0update3

siemenssimatic_hmi_ktp1200_basic_firmwareMatch17.0update4

AND

siemenssimatic_hmi_ktp1200_basicMatch-

Node

siemenssimatic_hmi_ktp_mobile_panels_firmwareRange<17.0

siemenssimatic_hmi_ktp_mobile_panels_firmwareMatch17.0-

siemenssimatic_hmi_ktp_mobile_panels_firmwareMatch17.0udpate1

siemenssimatic_hmi_ktp_mobile_panels_firmwareMatch17.0update2

siemenssimatic_hmi_ktp_mobile_panels_firmwareMatch17.0update3

AND

siemenssimatic_hmi_ktp_mobile_panelsMatch-

Node

siemenssiplus_hmi_ktp400_basic_firmwareRange<17.0

siemenssiplus_hmi_ktp400_basic_firmwareMatch17.0-

siemenssiplus_hmi_ktp400_basic_firmwareMatch17.0udpate1

siemenssiplus_hmi_ktp400_basic_firmwareMatch17.0update2

siemenssiplus_hmi_ktp400_basic_firmwareMatch17.0update3

siemenssiplus_hmi_ktp400_basic_firmwareMatch17.0update4

AND

siemenssiplus_hmi_ktp400_basicMatch-

Node

siemenssiplus_hmi_ktp700_basic_firmwareRange<17.0

siemenssiplus_hmi_ktp700_basic_firmwareMatch17.0-

siemenssiplus_hmi_ktp700_basic_firmwareMatch17.0udpate1

siemenssiplus_hmi_ktp700_basic_firmwareMatch17.0update2

siemenssiplus_hmi_ktp700_basic_firmwareMatch17.0update3

siemenssiplus_hmi_ktp700_basic_firmwareMatch17.0update4

AND

siemenssiplus_hmi_ktp700_basicMatch-

Node

siemenssiplus_hmi_ktp900_basic_firmwareRange<17.0

siemenssiplus_hmi_ktp900_basic_firmwareMatch17.0-

siemenssiplus_hmi_ktp900_basic_firmwareMatch17.0udpate1

siemenssiplus_hmi_ktp900_basic_firmwareMatch17.0update2

siemenssiplus_hmi_ktp900_basic_firmwareMatch17.0update3

siemenssiplus_hmi_ktp900_basic_firmwareMatch17.0update4

AND

siemenssiplus_hmi_ktp900_basicMatch-

Node

siemenssiplus_hmi_ktp1200_basic_firmwareRange<17.0

siemenssiplus_hmi_ktp1200_basic_firmwareMatch17.0-

siemenssiplus_hmi_ktp1200_basic_firmwareMatch17.0udpate1

siemenssiplus_hmi_ktp1200_basic_firmwareMatch17.0update2

siemenssiplus_hmi_ktp1200_basic_firmwareMatch17.0update3

siemenssiplus_hmi_ktp1200_basic_firmwareMatch17.0update4

AND

siemenssiplus_hmi_ktp1200_basicMatch-

CPENameOperatorVersion
siemens:simatic_hmi_comfort_panels_firmwaresiemens simatic hmi comfort panels firmwarelt17.0

CPE	Name	Operator	Version
siemens:simatic_hmi_comfort_panels_firmware	siemens simatic hmi comfort panels firmware	lt	17.0

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
    "versions": [
      {
        "version": "All versions < V17 Update 4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI KTP Mobile Panels",
    "versions": [
      {
        "version": "All versions < V17 Update 4",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI KTP1200 Basic",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI KTP400 Basic",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI KTP700 Basic",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC HMI KTP900 Basic",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS HMI KTP1200 BASIC",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS HMI KTP400 BASIC",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS HMI KTP700 BASIC",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS HMI KTP900 BASIC",
    "versions": [
      {
        "version": "All versions < V17 Update 5",
        "status": "affected"
      }
    ]
  }
]