Denial of Service Vulnerability in Siemens Devices
CVE-2022-39158
5.3MEDIUM
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 13 September 2022
What is CVE-2022-39158?
Certain Siemens devices do not properly manage partial HTTP requests, exposing them to slowloris attacks. This vulnerability can allow a remote attacker to initiate conditions that lead to denial of service, which can continue until the attacker's actions cease. This poses a significant risk to network availability and requires immediate attention and mitigation.
Affected Version(s)
RUGGEDCOM i800 All versions < V4.3.8
RUGGEDCOM i800NC All versions
RUGGEDCOM i801 All versions < V4.3.8