Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-27640

A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessi

Description

A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC CP 442-1 RNA

  • All versions < V1.5.18affected

Siemens SIMATIC CP 443-1 RNA

  • All versions < V1.5.18affected

References