Log in Start free

Vulnerability · Published Jul 12, 2022 · Assigned by siemens

CVE-2022-29884

High 7.5

In plain English

A high-severity security flaw in CP-8000 MASTER MODULE WITH I/O -25/+70°C from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).

Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.3%top 29.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.

Affected products (as reported)

VendorProductVersions
Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C All versions < CPC80 V16.30
Siemens CP-8000 MASTER MODULE WITH I/O -40/+70°C All versions < CPC80 V16.30
Siemens CP-8021 MASTER MODULE All versions < CPC80 V16.30
Siemens CP-8022 MASTER MODULE WITH GPRS All versions < CPC80 V16.30

Weakness: CWE-772

References