CVE-2022-47375
Published: Dec 12, 2023
Modified: Aug 3, 2024
CVSS v3.1
7.5
Description
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
| Vendor | Product | Versions |
|---|---|---|
Siemens | SIMATIC PC-Station Plus | affected All versions |
Siemens | SIMATIC S7-400 CPU 412-2 PN V7 | affected All versions |
Siemens | SIMATIC S7-400 CPU 414-3 PN/DP V7 | affected All versions |
Siemens | SIMATIC S7-400 CPU 414F-3 PN/DP V7 | affected All versions |
Siemens | SIMATIC S7-400 CPU 416-3 PN/DP V7 | affected All versions |
Siemens | SIMATIC S7-400 CPU 416F-3 PN/DP V7 | affected All versions |
Siemens | SINAMICS S120 (incl. SIPLUS variants) | affected All versions < V5.2 SP3 HF15 |
Siemens | SIPLUS S7-400 CPU 414-3 PN/DP V7 | affected All versions |
Siemens | SIPLUS S7-400 CPU 416-3 PN/DP V7 | affected All versions |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now