« Volver al listado

CVE-2022-27194

Estado: ModificadaAlta (7.5)—

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Siemens — Simatic PCS NEOSiemens — SinetplanSiemens — Totally Integrated Automation Portal

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-27194",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "SIMATIC PCS neo (Administration Console)",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V3.1 SP1"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "SINETPLAN",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "TIA Portal",
          "versions": [
            {
              "status": "affected",
              "version": "V15, V15.1, V16 and V17"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-04-12T09:15:15.017",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en SIMATIC PCS neo (Consola de Administración) (todas las versiones anteriores a V3.1 SP1), SINETPLAN (Todas las versiones), TIA Portal (versiones V15, V15.1, V16 y V17). El sistema afectado no puede procesar correctamente los paquetes especialmente diseñados enviados al puerto 8888/tcp. Un atacante remoto podría aprovechar esta vulnerabilidad para causar una condición de denegación de servicio. Los dispositivos afectados deben reiniciarse manualmente"
    }
  ],
  "lastModified": "2026-06-17T04:36:28.680",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884EC00C-1155-436D-94F4-C6F2303732CF",
              "versionEndExcluding": "3.1"
            },
            {
              "criteria": "cpe:2.3:a:siemens:simatic_pcs_neo:3.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69A8C49A-3AFD-4693-BE59-B3C75D5026E3"
            },
            {
              "criteria": "cpe:2.3:a:siemens:sinetplan:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73C56997-3D1D-435A-8B1C-DC1023CE5715"
            },
            {
              "criteria": "cpe:2.3:a:siemens:totally_integrated_automation_portal:15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5BC801E-9D78-4CD4-A457-00ABD5991515"
            },
            {
              "criteria": "cpe:2.3:a:siemens:totally_integrated_automation_portal:15.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C36F0E09-C1BB-4ED2-9008-99DC761FDFAA"
            },
            {
              "criteria": "cpe:2.3:a:siemens:totally_integrated_automation_portal:16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2E1E7FB1-03AF-4AF0-B1A6-3AF65C818596"
            },
            {
              "criteria": "cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E0C3283-1FEA-4054-9D48-5F683FA9E4FF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}