CVE-2022-27640

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
SiemensSIMATIC CP 442-1 RNAAll versions < V1.5.18
SiemensSIMATIC CP 443-1 RNAAll versions < V1.5.18

References

Timeline

Published
May 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-276418.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276428.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91CVE-2022-276438.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276448.8This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGCVE-2022-276458.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. AuthentiCVE-2022-276468.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276478.0This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276487.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interactCVE-2022-276497.5A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby CVE-2022-27659.8A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an CVE-2022-276507.5A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (DoCVE-2022-276516.8A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker En