CVE-2022-47374

Summary

CVE-2022-47374 is a vulnerability affecting various Siemens industrial control systems, including SIMATIC PC-Station Plus and S7-400 CPUs, as well as SINAMICS S120 and SIPLUS devices. The issue lies in the inadequate handling of HTTP(S) requests to the web server. An attacker can exploit this vulnerability by overwhelming the system with malicious HTTP(S) requests, leading to a denial-of-service condition. By not managing these requests effectively, these affected devices become susceptible to resource exhaustion attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.