CVE-2022-27194: siemens simatic_pcs_neo Uncontrolled Resource Consumption
Vulnerability summary
CVE-2022-27194 is a high (CVSS 7.8) Uncontrolled Resource Consumption vulnerability in siemens simatic_pcs_neo. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities.
Timeline
- 12-04-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.43%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.43% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens5 products
- simatic_pcs_neo< 3.1 | 3.1
- simatic pcs neo (administration console)All versions < V3.1 SP1
- sinetplanAll versions (No fix recorded)
- tia_portalV15, V15.1, V16 and V17
- totally_integrated_automation_portal15 | 15.1 | 16 | 17
1 vendor · 5 products
References
1 links- cert-portal.siemens.com/productcert/pdf/ssa-711829.pdfX Refsource MISCMitigationPatchVendor Advisory