PT-2022-14887 · Fernhill · Fernhill Scada Server

Published 2022-04-12 · Updated 2022-04-20 · CVE-2022-21155

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Fernhill SCADA Server versions 3.77 and earlier

Description A specially crafted packet sent to the server may cause an exception, leading to the server process (FHSvrService.exe) to exit.

Recommendations For Fernhill SCADA Server versions 3.77 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Resource Exhaustion

Weakness Enumeration

CWE-755

CWE-400

Related Identifiers

CVE-2022-21155

Affected Products

Fernhill Scada Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-21155 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21155 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-22-006-02 · Note