CVE-2022-29884

Summary

CVE	CVE-2022-29884
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-07-12 10:15:00 UTC
Updated	2022-07-19 18:18:00 UTC
Description	A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions < CPC80 V16.30), CP-8021 MASTER MODULE (All versions < CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions < CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.

Risk And Classification

Problem Types: CWE-772

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Siemens	Sicam A8000 Cp-8000	-	All	All	All
Operating System	Siemens	Sicam A8000 Cp-8000 Firmware	All	All	All	All
Hardware	Siemens	Sicam A8000 Cp-8021	-	All	All	All
Operating System	Siemens	Sicam A8000 Cp-8021 Firmware	All	All	All	All
Hardware	Siemens	Sicam A8000 Cp-8022	-	All	All	All
Operating System	Siemens	Sicam A8000 Cp-8022 Firmware	All	All	All	All

References

Reference	Source	Link	Tags
N/A	CONFIRM	cert-portal.siemens.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

591398 Siemens CPC80 Firmware of SICAM A8000 Devices Denial of Service (DoS) Vulnerability (SSA-491621, ICSA-22-195-14)