CVE-2022-25622

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.

This could allow an attacker to create a denial of service condition for TCP services on affected devices by sending specially crafted TCP segments.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-256237.8The Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low privilege local account can be elevated to the SCVE-2022-256258.8A malicious unauthorized PAM user can access the administration configuration data and change the values.CVE-2022-256265.3An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to cCVE-2022-256276.7An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in SyCVE-2022-256288.8An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4CVE-2022-256295.4An authenticated user who has the privilege to add/edit annotations on the Content tab, can craft a malicious annotation that can be executeCVE-2022-25634.8The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin toCVE-2022-256305.4An authenticated user can embed malicious content with XSS into the admin group policy page.CVE-2022-256317.8Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a tCVE-2022-256347.5Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory.CVE-2022-256356.5Realtek Linux/Android Bluetooth Mesh SDK has a buffer overflow vulnerability due to insufficient validation for broadcast network packet lenCVE-2022-256367.8net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds w