CVE-2022-34819criticalCWE-122

CVE-2022-34819: falha crítica em Siemens SIMATIC CP 1242-7 V2

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC CP+ Monitorar SIPLUS NET CP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 2.1%
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions < V3.3.46), SIMATIC CP 1243-8 IRC (All versions < V3.3.46), SIMATIC CP 1542SP-1 IRC (All versions >= V2.0 < V2.2.28), SIMATIC CP 1543-1 (All versions < V3.0.22), SIMATIC CP 1543SP-1 (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions >= V2.0 < V2.2.28), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions >= V2.0 < V2.2.28), SIPLUS NET CP 1242-7 V2 (All versions < V3.3.46), SIPLUS NET CP 1543-1 (All versions < V3.0.22), SIPLUS S7-1200 CP 1243-1 (All versions < V3.3.46), SIPLUS S7-1200 CP 1243-1 RAIL (All versions < V3.3.46). The application lacks proper validation of user-supplied data when parsing specific messages. This could result in a heap-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · SIMATIC CP 1242-7 V2Siemens · SIMATIC CP 1243-1Siemens · SIMATIC CP 1243-7 LTE EUSiemens · SIMATIC CP 1243-7 LTE USSiemens · SIMATIC CP 1243-8 IRCSiemens · SIMATIC CP 1542SP-1 IRCSiemens · SIMATIC CP 1543-1Siemens · SIMATIC CP 1543SP-1Siemens · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAILSiemens · SIPLUS ET 200SP CP 1543SP-1 ISECSiemens · SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAILSiemens · SIPLUS NET CP 1242-7 V2Siemens · SIPLUS NET CP 1543-1Siemens · SIPLUS S7-1200 CP 1243-1Siemens · SIPLUS S7-1200 CP 1243-1 RAIL
CVEs relacionadas — Siemens SIMATIC CP 1242-7 V2

No mesmo produto, das mais perigosas para as menos.

CVE-2022-34821HIGHCVE-2022-34821EPSS 2.4%CVE-2022-34820HIGHCVE-2022-34820EPSS 2.2%CVE-2022-43768HIGHCVE-2022-43768EPSS 1.0%CVE-2022-43716HIGHCVE-2022-43716EPSS 1.0%CVE-2022-43767HIGHCVE-2022-43767EPSS 0.7%