CVE-2022-27194

🗓️ 12 Apr 2022 09:07:59Reported by siemensType

A vulnerability in SIMATIC PCS neo, SINETPLAN, and TIA Portal allows remote attackers to cause a Denial-of-Service condition by sending specially crafted packets to port 8888/tcp which requires manual restart of affected devices

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-27194	12 Apr 202209:15	–	attackerkb
BDU FSTEC	The vulnerability of the software development environment of TIA Portal, the system for automating technological processes, and SINETPLAN, a system for planning automation processes; as well as the web-based systems for managing technological processes, SIMATIC PCS neo, is related to uncontrolled resource consumption, allowing attackers to trigger service failures.	13 Jul 202200:00	–	bdu_fstec
CNNVD	多款Siemens SIMATIC 产品资源管理错误漏洞	12 Apr 202200:00	–	cnnvd
CNVD	Siemens TIA Administrator Denial of Service Vulnerability	13 Apr 202200:00	–	cnvd
CVE	CVE-2022-27194	12 Apr 202209:07	–	cve
EUVD	EUVD-2022-31727	3 Oct 202520:07	–	euvd
ICS	Siemens TIA Administrator	12 Apr 202200:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	12 Apr 202200:00	–	ncsc
NVD	CVE-2022-27194	12 Apr 202209:15	–	nvd
Prion	Design/Logic Flaw	12 Apr 202209:15	–	prion

[
  {
    "product": "SIMATIC PCS neo (Administration Console)",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.1 SP1"
      }
    ]
  },
  {
    "product": "SINETPLAN",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions"
      }
    ]
  },
  {
    "product": "TIA Portal",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "V15, V15.1, V16 and V17"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf

12 Apr 2022 09:07Current

7.5High risk

Vulners AI Score7.5

EPSS0.01336

CWE-400