medium6.5
CVE-2022-27640
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18).
Impact
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Simatic Cp 442-1 Rna Firmware | before 1.5.18 |
| Siemens | Simatic Cp 443-1 Rna Firmware | before 1.5.18 |