Riskcovery

CVE-2022-47374

State
Published
Severity
7.5 High
Published
Dec 12, 2023
Updated
Feb 25, 2026
Reserved
Dec 13, 2022

Read the record on cve.org

Description

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly.

This could allow an attacker to exhaust system resources and create a denial of service condition for the device.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

Affected Products

ProductVersions
SIMATIC PC-Station PlusSiemens
  • All versionsAffected
SIMATIC S7-400 CPU 412-2 PN V7Siemens
  • All versionsAffected
SIMATIC S7-400 CPU 414-3 PN/DP V7Siemens
  • All versionsAffected
SIMATIC S7-400 CPU 414F-3 PN/DP V7Siemens
  • All versionsAffected
SIMATIC S7-400 CPU 416-3 PN/DP V7Siemens
  • All versionsAffected
SIMATIC S7-400 CPU 416F-3 PN/DP V7Siemens
  • All versionsAffected
SINAMICS S120 (incl. SIPLUS variants)Siemens
  • All versions < V5.2 SP3 HF15Affected
SIPLUS S7-400 CPU 414-3 PN/DP V7Siemens
  • All versionsAffected
SIPLUS S7-400 CPU 416-3 PN/DP V7Siemens
  • All versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.