Към съдържанието
Търсене

CVE-2022-40227: Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.

Засегнати продукти

  • Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants): All versions < V17 Update 4
  • Siemens SIMATIC HMI KTP Mobile Panels: All versions < V17 Update 4
  • Siemens SIMATIC HMI KTP1200 Basic: All versions < V17 Update 5
  • Siemens SIMATIC HMI KTP400 Basic: All versions < V17 Update 5
  • Siemens SIMATIC HMI KTP700 Basic: All versions < V17 Update 5
  • Siemens SIMATIC HMI KTP900 Basic: All versions < V17 Update 5
  • Siemens SIPLUS HMI KTP1200 BASIC: All versions < V17 Update 5
  • Siemens SIPLUS HMI KTP400 BASIC: All versions < V17 Update 5
  • Siemens SIPLUS HMI KTP700 BASIC: All versions < V17 Update 5
  • Siemens SIPLUS HMI KTP900 BASIC: All versions < V17 Update 5

Вид слабост

История

  • 11 октомври 2022 Публикувано

Други уязвимости в Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)

Първоизточници