CVE-2015-2822
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
08/04/2015
Last modified:
12/04/2025
Description
Siemens SIMATIC HMI Comfort Panels before WinCC (TIA Portal) 13 SP1 Upd2 and SIMATIC WinCC Runtime Advanced before WinCC (TIA Portal) 13 SP1 Upd2 allow man-in-the-middle attackers to cause a denial of service via crafted packets on TCP port 102.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:siemens:wincc:*:sp1:*:*:*:*:*:* | 13.0 (including) | |
cpe:2.3:a:siemens:wincc:*:sp1:*:*:advanced:*:*:* | 13.0 (including) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://www.securityfocus.com/bid/74028
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf
- http://www.securityfocus.com/bid/74028
- http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-487246.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-487246.pdf