NetSight
medium5.3

CVE-2022-27481

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (Al…

Impact

A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.

Affected products

VendorProductAffected versions
SiemensScalance W1788-2ia M12 Firmware
before 3.0.0
SiemensScalance W1788-2 M12 Firmware
before 3.0.0
SiemensScalance W1788-2 Eec M12 Firmware
before 3.0.0
SiemensScalance W1788-1 M12 Firmware
before 3.0.0

Weakness classification

References