CVE-2022-40227: falha de alta gravidade em Siemens SIMATIC HMI Comfort Panels (incl.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.9%
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Siemens · SIMATIC HMI Comfort Panels (incl. SIPLUS variants)Siemens · SIMATIC HMI KTP1200 BasicSiemens · SIMATIC HMI KTP400 BasicSiemens · SIMATIC HMI KTP700 BasicSiemens · SIMATIC HMI KTP900 BasicSiemens · SIMATIC HMI KTP Mobile PanelsSiemens · SIPLUS HMI KTP1200 BASICSiemens · SIPLUS HMI KTP400 BASICSiemens · SIPLUS HMI KTP700 BASICSiemens · SIPLUS HMI KTP900 BASICCVEs relacionadas — Siemens SIMATIC HMI Comfort Panels (incl.
No mesmo produto, das mais perigosas para as menos.