PT-2022-3585 · Siemens · Sinetplan+2

Published 2022-04-12 · Updated 2022-04-19 · CVE-2022-27194

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SIMATIC PCS neo versions prior to V3.1 SP1 SINETPLAN versions prior to any specified fix TIA Portal versions V15 through V17

Description The issue is related to an uncontrolled resource consumption in the TIA Portal, SINETPLAN, and SIMATIC PCS neo systems. It can be exploited by a remote attacker who sends specially crafted packets to the TCP port 8888, potentially causing a Denial-of-Service condition. The affected system would need to be restarted manually.

Recommendations For SIMATIC PCS neo versions prior to V3.1 SP1, update to version V3.1 SP1 or later. For SINETPLAN, since no specific fix version is mentioned, restart the system manually after an attack to restore service. For TIA Portal versions V15 through V17, restart the system manually after an attack to restore service. As a temporary workaround, consider restricting access to the TCP port 8888 to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2022-04369

CVE-2022-27194

Affected Products

Simatic Pcs Neo

Sinetplan

Tia Portal

References · 4

• https://bdu.fstec.ru/vul/2022-04369 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-27194 · Security Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-27194 · Vendor Advisory