CVE-2022-27194
High
Description
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Simatic Pcs Neo
PublishedApr 12, 2022
First seenApr 12, 2022
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- siemens simatic_pcs_neo3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens simatic_pcs_neo | v < 3.1, 3.1 | 3.1 |
| siemens sinetplan | No range specified | — |
| siemens totally_integrated_automation_portal | 15, 15.1, 16, 17 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.