CVE-2022-47375

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 12, 2023
Updated: Dec 18, 2023
CWE ID 119
CWE ID 805

Summary

CVE-2022-47375 is a vulnerability that affects various Siemens industrial control products, including SIMATIC PC-Station Plus, SIMATIC S7-400 CPUs, and SINAMICS S120. The issue lies in the way these devices handle long file names, which can result in a buffer overflow. An attacker can exploit this vulnerability to cause a denial of service condition on the affected device. Industrial control systems utilizing these impacted Siemens products should be updated as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share