CVE-2022-28329CWE-20

CVE-2022-28329: vulnerability in Siemens SCALANCE W1788-1 M12

Published · Updated

Follow this CVE+ Monitor SCALANCE W1788-1 M12+ Monitor SCALANCE W1788-2 EEC M12

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
Affected products
Siemens · SCALANCE W1788-1 M12Siemens · SCALANCE W1788-2 EEC M12Siemens · SCALANCE W1788-2IA M12Siemens · SCALANCE W1788-2 M12
Related CVEs — Siemens SCALANCE W1788-1 M12

In the same product, most dangerous first.

CVE-2022-36323CRITICALCVE-2022-36323EPSS 1.9%CVE-2020-28400HIGHCVE-2020-28400EPSS 1.9%CVE-2022-36324HIGHCVE-2022-36324EPSS 1.8%CVE-2022-31765HIGHCVE-2022-31765EPSS 1.1%CVE-2022-36325MEDIUMCVE-2022-36325EPSS 1.0%CVE-2022-28328—CVE-2022-28328EPSS 0.9%