CVE-2022-43723

State: Published
Severity: 7.5 High
Published: Dec 13, 2022
Updated: Apr 22, 2025
Reserved: Oct 24, 2022

Description

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send messages and create a denial of service condition as the application crashes. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-1287 Improper Validation of Specified Type of Input
CWE-20 Improper Input Validation

Affected Products

Product	Versions
SICAM PAS/PQSSiemens	All versions < V7.0Affected
SICAM PAS/PQSSiemens	All versions >= 7.0 < V8.06Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-849072.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.