CVE-2022-27194: High severity siemens simatic pcs neo firmware vulnerability
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-27194.
What is the severity of CVE-2022-27194?
The severity of CVE-2022-27194 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2022-27194?
SIEMENS SIMATIC PCS neo (Administration Console) versions prior to V3.1 SP1, SINETPLAN (All versions), TIA Portal versions V15, V15.1, V16, and V17 are affected by CVE-2022-27194.
What is the vulnerability in SIMATIC PCS neo?
The vulnerability in SIMATIC PCS neo allows a remote attacker to exploit specially crafted packets sent to port 8888/tcp.
Where can I find more information about CVE-2022-27194?
You can find more information about CVE-2022-27194 in the Siemens Product Vulnerability Advisory SSA-711829, available at https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf.