Denial of Service Vulnerability in SIPROTEC 5 by Siemens
CVE-2022-45044
5.3MEDIUM
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 13 December 2022
What is CVE-2022-45044?
A vulnerability exists in various models of the SIPROTEC 5 series from Siemens, resulting from improper restrictions on secure client-initiated renegotiations within SSL and TLS protocols. This flaw can potentially enable attackers to launch denial of service attacks, causing disruption on designated ports (443/tcp and 4443/tcp). It is crucial for users of the affected products to apply relevant updates to ensure system integrity and availability.
Affected Version(s)
SIPROTEC 5 6MD84 (CP300) All versions < V9.50
SIPROTEC 5 6MD85 (CP200) 0
SIPROTEC 5 6MD85 (CP300) All versions < V9.50