CVE-2022-27640CWE-400

CVE-2022-27640: vulnerability in Siemens SIMATIC CP 442-1 RNA

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
Related CVEs — Siemens SIMATIC CP 442-1 RNA

In the same product, most dangerous first.