CVE-2022-27194

highpriority · track · 31EPSS 0.014 · 73 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.43% (73rd) EPSS

CVSS 7.8 · high

Is it mine?

22 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedSIMATIC PCS neo (Administration Console)siemens_psirt
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/
FixedSINETPLANsiemens_psirt
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
FixedTIA Portalsiemens_psirt
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
FixedSIMATIC PCS neo (Administration Console)cisa_csaf_ot
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807752/
FixedSINETPLANcisa_csaf_ot
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
FixedTIA Portalcisa_csaf_ot
Update TIA Administrator to V1.0 SP7 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/
MitigationSIMATIC PCS neo (Administration Console)siemens_psirt
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
MitigationSINETPLANsiemens_psirt
Restrict access to port 8888/tcp to localhost (default)
MitigationTIA Portalsiemens_psirt
Restrict access to port 8888/tcp to localhost (default)
MitigationSIMATIC PCS neo (Administration Console)cisa_csaf_ot
Apply measures described in "Industrial Security in SIMATIC PCS neo": https://support.industry.siemens.com/cs/ww/en/view/109771524/
MitigationSINETPLANcisa_csaf_ot
Restrict access to port 8888/tcp to localhost (default)
MitigationTIA Portalcisa_csaf_ot
Restrict access to port 8888/tcp to localhost (default)

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.8

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 10 · impact 6.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-400USprimaryCWE-400USCWE-400USCWE-400US

affected products (22)

Products and version ranges known to be affected.

SIMATIC PCS neo (Administration Console)all versionscisa_csaf_otUS
SINETPLANall versionscisa_csaf_otUS
TIA Portalall versionscisa_csaf_otUS
Siemens SIMATIC PCS neo (Administration Console)< V3.1_SP1cisa_csaf_otUS
Siemens SINETPLAN≤ vers:all/*cisa_csaf_otUS
Siemens TIA Portal≤ 15|15.1|16|17cisa_csaf_otUS
Siemens SIMATIC PCS neo (Administration Console)All versions → V3.1 SP1enisa_euvdEU
Siemens SINETPLAN≤ All versionsenisa_euvdEU
Siemens TIA Portal≤ V15, V15.1, V16 and V17enisa_euvdEU
Siemens AG SIMATIC PCS neo≤ 3.1 SP1fstec_bduRU
Siemens AG SINETPLAN≤ 1.0 SP7fstec_bduRU
Siemens AG TIA Portal≤ 1.0 SP7fstec_bduRU
siemens simatic pcs neo< 3.1nvdUScpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*
siemens simatic pcs neo= 3.1nvdUScpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*
siemens sinetplanall versionsnvdUScpe:2.3:a:siemens:sinetplan:*:*:*:*:*:*:*:*
siemens totally integrated automation portal= 15nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
siemens totally integrated automation portal= 15.1nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
siemens totally integrated automation portal= 16nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
siemens totally integrated automation portal= 17nvdUScpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:*
Siemens SIMATIC PCS neo (Administration Console)< V3.1 SP1siemens_psirtDE

showing 20 of 22

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-711829SSA-711829: Denial of Service Vulnerability in TIA Administrator2022-04-12csaf · siemens_psirtDE
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.
ICSA-22-104-16Siemens TIA Administrator2022-04-12icsa · cisa_csaf_otUS
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affected products and recommends to update to the latest versions.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd siemens_psirt NVD CVE.org MITRE

published 2022-04-12modified 2026-06-17

related (9,612)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-28318US	—OT critical	43.7% (99th)	KEV	2026-06-04
SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provi…
CVE-2026-45498US	high7.5OT critical	63.1% (99th)	KEV	2026-05-20
Microsoft Defender Denial of Service Vulnerability
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	2023-10-10
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through…
CVE-2023-38180US	—OT critical	14.1% (97th)	KEV	2023-08-08
.NET and Visual Studio Denial of Service Vulnerability
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	2021-12-10
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect agai…

+9607 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan