CVE-2022-27194
highPriorität · verfolgen · 31EPSS 0.014 · 73. PerzentilDEEURUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSIMATIC PCS neo (Administration Console)siemens_psirt
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/ - BehobenSINETPLANsiemens_psirt
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenTIA Portalsiemens_psirt
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenSIMATIC PCS neo (Administration Console)cisa_csaf_ot
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/ - BehobenSINETPLANcisa_csaf_ot
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenTIA Portalcisa_csaf_ot
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - MitigationSIMATIC PCS neo (Administration Console)siemens_psirt
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
- MitigationSINETPLANsiemens_psirt
Restrict access to port 8888/tcp to localhost (default)
- MitigationTIA Portalsiemens_psirt
Restrict access to port 8888/tcp to localhost (default)
- MitigationSIMATIC PCS neo (Administration Console)cisa_csaf_ot
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
- MitigationSINETPLANcisa_csaf_ot
Restrict access to port 8888/tcp to localhost (default)
- MitigationTIA Portalcisa_csaf_ot
Restrict access to port 8888/tcp to localhost (default)
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- siemens totally integrated automation portal= 15nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
- siemens totally integrated automation portal= 15.1nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
- siemens totally integrated automation portal= 16nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
- siemens totally integrated automation portal= 17nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-711829SSA-711829: Denial of Service Vulnerability in TIA Administrator2022-04-12csaf · siemens_psirtDE
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSA-22-104-16Siemens TIA Administrator2022-04-12icsa · cisa_csaf_otUS
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdfcnnvd
- https://cxsecurity.com/cveshow/CVE-2022-27194/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-104-16cnnvd
- https://vigilance.fr/vulnerability/SIMATIC-PCS-neo-denial-of-service-via-TIA-Administrator-38021cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2022042009cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdfenisa_euvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdfMitigationPatchVendor Advisorynvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan