CVE-2022-28328

2022-04-1209:08:06

CWE-20

siemens

www.cve.org

scalance w1788-1 m12

vulnerability

denial of service

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed Multicast LLC frames. This could allow an attacker to trigger a denial of service condition.

CNA Affected

[
  {
    "product": "SCALANCE W1788-1 M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2 EEC M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2 M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  },
  {
    "product": "SCALANCE W1788-2IA M12",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V3.0.0"
      }
    ]
  }
]

References

cert-portal.siemens.com/productcert/pdf/ssa-392912.pdf