What is the CVSS score of CVE-2022-25622?

CVE-2022-25622 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.8%.

Simatic Cfu Diq Firmware CVE-2022-25622

HIGH

Uncontrolled Resource Consumption (CWE-400)

2022-04-12 productcert@siemens.com

Denial Of Service Simatic Cfu Diq Firmware Simatic Cfu Pa Firmware Simatic S7 300 Cpu Firmware Simatic S7 400H V6 Firmware Simatic S7 400 Pn Dp V7 Firmware Simatic S7 410 V8 Firmware Simatic S7 410 V10 Firmware Simatic S7 1500 Cpu Firmware Simatic Tdc Cp51M1 Firmware Simatic Tdc Cpu555 Firmware Simatic Winac Rtx Firmware Simit Simulation Platform

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Apr 12, 2022 - 09:15 nvd

HIGH 7.5

DescriptionNVD

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.

This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

AnalysisAI

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined. This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments. Affected products include: Siemens Simatic Cfu Diq Firmware, Siemens Simatic Cfu Pa Firmware, Siemens Simatic S7-300 Cpu Firmware, Siemens Simatic S7-400H V6 Firmware, Siemens Simatic S7-400 Pn\/Dp V7 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.