CVE-2022-27194
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
Published:Apr 12, 2022
Last Modified:Nov 21, 2024
EPS:Apr 12, 2022
EPSS Score:0.00161
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Siemens
Product
Simatic Pcs Neo
Siemens
Simatic Pcs Neo
Vendor
Siemens
Product
Sinetplan
Siemens
Sinetplan
Vendor
Siemens
Product
Totally Integrated Automation Portal
Siemens
Totally Integrated Automation Portal
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
