CVE-2022-28329
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
Se ha identificado una vulnerabilidad en SCALANCE W1788-1 M12 (todas las versiones anteriores a V3.0.0), SCALANCE W1788-2 EEC M12 (todas las versiones anteriores a V3.0.0), SCALANCE W1788-2 M12 (todas las versiones anteriores a V3.0.0), SCALANCE W1788-2IA M12 (todas las versiones anteriores a V3.0.0). Los dispositivos afectados no manejan correctamente los paquetes TCP malformados recibidos a través de la función RemoteCapture. Esto podría permitir a un atacante conllevar a una condición de denegación de servicio que sólo afecta al puerto usado por la función RemoteCapture
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-04-01 CVE Reserved
- 2022-04-12 CVE Published
- 2024-08-03 CVE Updated
- 2024-11-16 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf | 2022-04-19 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Scalance W1788-2ia M12 Firmware Search vendor "Siemens" for product "Scalance W1788-2ia M12 Firmware" | < 3.0.0 Search vendor "Siemens" for product "Scalance W1788-2ia M12 Firmware" and version " < 3.0.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1788-2ia M12 Search vendor "Siemens" for product "Scalance W1788-2ia M12" | - | - |
Safe
|
Siemens Search vendor "Siemens" | Scalance W1788-2 M12 Firmware Search vendor "Siemens" for product "Scalance W1788-2 M12 Firmware" | < 3.0.0 Search vendor "Siemens" for product "Scalance W1788-2 M12 Firmware" and version " < 3.0.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1788-2 M12 Search vendor "Siemens" for product "Scalance W1788-2 M12" | - | - |
Safe
|
Siemens Search vendor "Siemens" | Scalance W1788-2 Eec M12 Firmware Search vendor "Siemens" for product "Scalance W1788-2 Eec M12 Firmware" | < 3.0.0 Search vendor "Siemens" for product "Scalance W1788-2 Eec M12 Firmware" and version " < 3.0.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1788-2 Eec M12 Search vendor "Siemens" for product "Scalance W1788-2 Eec M12" | - | - |
Safe
|
Siemens Search vendor "Siemens" | Scalance W1788-1 M12 Firmware Search vendor "Siemens" for product "Scalance W1788-1 M12 Firmware" | < 3.0.0 Search vendor "Siemens" for product "Scalance W1788-1 M12 Firmware" and version " < 3.0.0" | - |
Affected
| in | Siemens Search vendor "Siemens" | Scalance W1788-1 M12 Search vendor "Siemens" for product "Scalance W1788-1 M12" | - | - |
Safe
|