Denial of Service Vulnerability in Siemens Devices

CVE-2022-39158

Summary

Certain Siemens devices do not properly manage partial HTTP requests, exposing them to slowloris attacks. This vulnerability can allow a remote attacker to initiate conditions that lead to denial of service, which can continue until the attacker's actions cease. This poses a significant risk to network availability and requires immediate attention and mitigation.

References