« Volver al listado

CVE-2022-43723

Estado: ModificadaAlta (7.5)—

Se ha identificado una vulnerabilidad en SICAM PAS/PQS (Todas las versiones < V7.0), SICAM PAS/PQS (Todas las versiones >= 7.0 < V8.06). El software afectado no valida correctamente la entrada de un determinado parámetro en s7ontcp.dll. Esto podría permitir que un atacante remoto no autenticado envíe mensajes y cree una condición de Denegación de Servicio (DoS) cuando la aplicación falla. En el momento de asignar el CVE, la versión de firmware afectada del componente ya ha sido reemplazada por versiones principales sucesivas.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Siemens — Sicam Pas/pqs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-43723",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-43723",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-22T15:17:02.873243Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "SICAM PAS/PQS",
          "versions": [
            {
              "status": "affected",
              "version": "All versions < V7.0"
            }
          ]
        },
        {
          "vendor": "Siemens",
          "product": "SICAM PAS/PQS",
          "versions": [
            {
              "status": "affected",
              "version": "All versions >= 7.0 < V8.06"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-12-13T16:15:24.250",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1287"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en SICAM PAS/PQS (Todas las versiones &lt; V7.0), SICAM PAS/PQS (Todas las versiones &gt;= 7.0 &lt; V8.06). El software afectado no valida correctamente la entrada de un determinado parámetro en s7ontcp.dll. Esto podría permitir que un atacante remoto no autenticado envíe mensajes y cree una condición de Denegación de Servicio (DoS) cuando la aplicación falla. En el momento de asignar el CVE, la versión de firmware afectada del componente ya ha sido reemplazada por versiones principales sucesivas."
    }
  ],
  "lastModified": "2026-06-17T05:07:13.567",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:sicam_pas\\/pqs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21250DFA-9054-4988-BB37-E77789AD4F20",
              "versionEndExcluding": "8.06",
              "versionStartIncluding": "7.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}