Lucene search

K
cvelistSiemensCVELIST:CVE-2022-27640
HistoryMay 10, 2022 - 9:47 a.m.

CVE-2022-27640

2022-05-1009:47:02
CWE-400
siemens
www.cve.org
3
simatic cp
arp broadcast
denial of service

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

19.8%

A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.

CNA Affected

[
  {
    "product": "SIMATIC CP 442-1 RNA",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.5.18"
      }
    ]
  },
  {
    "product": "SIMATIC CP 443-1 RNA",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V1.5.18"
      }
    ]
  }
]

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

19.8%

Related for CVELIST:CVE-2022-27640