Medium severity6.5NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026
CVE-2022-27640
CVE-2022-27640
Description
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
Affected products
5- cpe:2.3:o:siemens:simatic_cp_442-1_rna_firmware:*:*:*:*:*:*:*:*Range: <1.5.18
- cpe:2.3:o:siemens:simatic_cp_443-1_rna_firmware:*:*:*:*:*:*:*:*Range: <1.5.18
< V1.5.18+ 1 more
- (no CPE)range: < V1.5.18
- (no CPE)range: All versions < V1.5.18
- Range: All versions < V1.5.18
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-480937.pdfnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.