CVE-2022-1012

highPriorität · verfolgen · 35EPSS 0.044 · 91. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

4.39% (91st) EPSS

CVSS 8.2 · high

Is it mine?

49 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC MV540 H (6GF3540-0GE10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV540 S (6GF3540-0CD10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV550 H (6GF3550-0GE10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV550 S (6GF3550-0CD10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV560 U (6GF3560-0LE10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV560 X (6GF3560-0HE10)siemens_psirt
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
BehobenSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827684/
BehobenSIMATIC MV540 H (6GF3540-0GE10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV540 S (6GF3540-0CD10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV550 H (6GF3550-0GE10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV550 S (6GF3550-0CD10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV560 U (6GF3560-0LE10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
BehobenSIMATIC MV560 X (6GF3560-0HE10)cisa_csaf_ot
Update to V3.3.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109821128/
MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt
Only build and run applications from trusted sources
WorkaroundSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot
Only build and run applications from trusted sources

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.2

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 4.2

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.18.2highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-200USCWE-401USCWE-401USCWE-401USCWE-401US

betroffene Produkte (49)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Dell NetWorkeralle Versionencert_bundDEcpe:/a:dell:networker:-
IBM DataPower Gateway 10.5.0alle Versionencert_bundDEcpe:/a:ibm:datapower_gateway:10.5.0
IBM FlashSystemalle Versionencert_bundDEcpe:/a:ibm:flashsystem:-
IBM MQ Appliancealle Versionencert_bundDEcpe:/a:ibm:mq:appliance
IBM Power Hardware Management Consolealle Versionencert_bundDEcpe:/a:ibm:hardware_management_console:-
IBM SAN Volume Controlleralle Versionencert_bundDEcpe:/a:ibm:san_volume_controller:-
IBM Security Verify Access < 10.0.5-ISS-ISVA-FP000alle Versionencert_bundDEcpe:/a:ibm:security_verify_access:10.0.5-iss-isva-fp000
IBM Spectrum Protect 10.1alle Versionencert_bundDEcpe:/a:ibm:spectrum_protect:10.1
IBM Storwizealle Versionencert_bundDEcpe:/a:ibm:storwize:-
NetApp AFF Baseboard Management Controlleralle Versionencert_bundDEcpe:/h:netapp:aff:::baseboard_management_controller
Open Source Linux Kernelalle Versionencert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 9alle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:9
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
Siemens SIMATIC S7 1500 TM MFPalle Versionencert_bundDEcpe:/h:siemens:simatic_s7:1500_tm_mfp
Ubuntu Linuxalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:-
SIMATIC MV540 H (6GF3540-0GE10)alle Versionencisa_csaf_otUS
SIMATIC MV540 S (6GF3540-0CD10)alle Versionencisa_csaf_otUS

20 von 49 angezeigt

Advisories (6)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-561322SSA-561322: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3.42023-07-11csaf · siemens_psirtDE
SIMATIC MV500 devices before V3.3.4 are affected by multiple vulnerabilities in the web server and several third-party components. Siemens has released updates for the affected products and recommends to update to the latest versions.
SSA-794697SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.12023-06-13csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).
WID-SEC-W-2022-0501Linux Kernel: Schwachstelle ermöglicht Denial of ServiceDeutsch2022-06-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
WID-SEC-W-2023-1432Siemens SIMATIC S7: Mehrere SchwachstellenDeutsch2023-06-12csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, physischer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.
ICSA-23-166-11Siemens SIMATIC S7-1500 TM MFP Linux Kernel2023-06-13icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 ( https://cert-portal.siemens.com/productcert/html/ssa-265688.html).
ICSA-23-194-04Siemens SIMATIC MV500 Devices2023-07-11icsa · cisa_csaf_otUS
SIMATIC MV500 devices before V3.3.4 are affected by multiple vulnerabilities in the web server and several third-party components. Siemens has released updates for the affected products and recommends to update to the latest versions.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2022-08-05geändert 2026-06-17

Referenzen (66)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan