CVE-2022-47375
Description
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| siemens sinamics_s120_firmware | No range specified, 4.7, 4.8, 4.9, 5.0, 5.1, 5.2 | — |
| siemens 6es7412-2ek07-0ab0_firmware | No range specified | — |
| siemens 6es7414-3em07-0ab0_firmware | No range specified | — |
| siemens 6es7414-3fm07-0ab0_firmware | No range specified | — |
| siemens 6es7416-3es07-0ab0_firmware | No range specified | — |
| siemens 6es7416-3fs07-0ab0_firmware | No range specified | — |
| siemens 6ag1414-3em07-7ab0_firmware | No range specified | — |
| siemens 6ag1416-3es07-7ab0_firmware | No range specified | — |
| siemens simatic_pc-station_plus_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.