Lucene search

K
cvelistSiemensCVELIST:CVE-2022-27481
HistoryApr 12, 2022 - 9:08 a.m.

CVE-2022-27481

2022-04-1209:08:04
CWE-362
siemens
www.cve.org
3
scalance w1788-1 m12
scalance w1788-2 eec m12
scalance w1788-2 m12
scalance w1788-2ia m12
arp requests
race condition
device crash

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

19.8%

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.

CNA Affected

[
  {
    "product": "SCALANCE W1788-1 M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2 EEC M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2 M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2IA M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  }
]

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

19.8%

Related for CVELIST:CVE-2022-27481