medium6.5
CVE-2022-28329
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (Al…
Impact
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle malformed TCP packets received over the RemoteCapture feature. This could allow an attacker to lead to a denial of service condition which only affects the port used by the RemoteCapture feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Scalance W1788-2ia M12 Firmware | before 3.0.0 |
| Siemens | Scalance W1788-2 M12 Firmware | before 3.0.0 |
| Siemens | Scalance W1788-2 Eec M12 Firmware | before 3.0.0 |
| Siemens | Scalance W1788-1 M12 Firmware | before 3.0.0 |