CVE-2022-47374: falha de alta gravidade em Siemens SIMATIC PC-Station Plus
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar SIMATIC S7-400 CPU 414-3 PN/DP+ Monitorar SIMATIC S7-400 CPU 414F-3 PN/DP
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.7%
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly.
This could allow an attacker to exhaust system resources and create a denial of service condition for the device.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · SIMATIC PC-Station PlusSiemens · SIMATIC S7-400 CPU 412-2 PN V7Siemens · SIMATIC S7-400 CPU 414-3 PN/DP V7Siemens · SIMATIC S7-400 CPU 414F-3 PN/DP V7Siemens · SIMATIC S7-400 CPU 416-3 PN/DP V7Siemens · SIMATIC S7-400 CPU 416F-3 PN/DP V7Siemens · SINAMICS S120 (incl. SIPLUS variants)Siemens · SIPLUS S7-400 CPU 414-3 PN/DP V7Siemens · SIPLUS S7-400 CPU 416-3 PN/DP V7CVEs relacionadas — Siemens SIMATIC PC-Station Plus
No mesmo produto, das mais perigosas para as menos.