Denial of Service Vulnerability in Siemens SIMATIC CP and SIPLUS Products

CVE-2022-43768

Summary

A vulnerability exists in the webserver of Siemens SIMATIC CP and SIPLUS products that may expose these systems to a denial of service condition. By exploiting this vulnerability, an attacker can disrupt the availability of the webserver, potentially halting operations dependent on the affected devices. Affected devices include multiple variants of the SIMATIC CP series, including CP 1242-7, CP 1243-1, and others, across various versions prior to specified patches. Users are recommended to apply security updates to mitigate the risks associated with this vulnerability.

References