Back to the CVE list
CVE-2022-43768

Resource allocation without limits in Siemens Simatic Cp 1242 7 V2

CVSS score

7.5

EPSS probability

%1.0

Risk score

0.1

Published

3 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2022-43768 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2022-43768 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1siemenssimatic cp 1242-7 v2 firmware View
2siemenssimatic cp 1242-7 v2 View
3siemenssimatic cp 1243-1 firmware View
4siemenssimatic cp 1243-1 View
5siemenssimatic cp 1243-1 dnp3 firmware View
6siemenssimatic cp 1243-1 dnp3 View
7siemenssimatic cp 1243-1 iec firmware View
8siemenssimatic cp 1243-1 iec View
9siemenssimatic cp 1243-7 lte eu firmware View
10siemenssimatic cp 1243-7 lte eu View
11siemenssimatic cp 1243-7 lte us firmware View
12siemenssimatic cp 1243-7 lte us View
13siemenssimatic cp 1243-8 irc firmware View
14siemenssimatic cp 1243-8 irc View
15siemenssimatic cp 1542sp-1 firmware View
16siemenssimatic cp 1542sp-1 View
17siemenssimatic cp 1542sp-1 irc firmware View
18siemenssimatic cp 1542sp-1 irc View
19siemenssimatic cp 1543sp-1 firmware View
20siemenssimatic cp 1543sp-1 View
21siemenssimatic cp 443-1 firmware View
22siemenssimatic cp 443-1 View
23siemenssimatic cp 443-1 advanced firmware View
24siemenssimatic cp 443-1 advanced View
25siemenssimatic ipc diagbase firmware View
26siemenssimatic ipc diagbase View
27siemenssimatic ipc diagmonitor firmware View
28siemenssimatic ipc diagmonitor View
29siemenssiplus et 200sp cp 1542sp-1 irc tx rail firmware View
30siemenssiplus et 200sp cp 1542sp-1 irc tx rail View
31siemenssiplus et 200sp cp 1543sp-1 isec firmware View
32siemenssiplus et 200sp cp 1543sp-1 isec View
33siemenssiplus et 200sp cp 1543sp-1 isec tx rail firmware View
34siemenssiplus et 200sp cp 1543sp-1 isec tx rail View
35siemenssiplus net cp 1242-7 v2 firmware View
36siemenssiplus net cp 1242-7 v2 View
37siemenssiplus net cp 443-1 firmware View
38siemenssiplus net cp 443-1 View
39siemenssiplus net cp 443-1 advanced firmware View
40siemenssiplus net cp 443-1 advanced View
41siemenssiplus s7-1200 cp 1243-1 firmware View
42siemenssiplus s7-1200 cp 1243-1 View
43siemenssiplus s7-1200 cp 1243-1 rail firmware View
44siemenssiplus s7-1200 cp 1243-1 rail View
45siemenssiplus tim 1531 irc firmware View
46siemenssiplus tim 1531 irc View
47siemenstim 1531 irc firmware View
48siemenstim 1531 irc View
Total affected vendors: 1|Products: 48

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.5CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-43768 is associated with the following CWEs:

CWE-770: Allocation of Resources Without Limits or Throttling

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-43768 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://cert-portal.siemens.com/productcert/html/ssa-139628.htmlnvdhttps://cert-portal.siemens.com/productcert/html/ssa-566905.htmlnvdhttps://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdfvendor-advisory

CVSS Vector Radar Chart

7.5 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

S
siemens logo
siemens

Weakness Type (CWE & CAPEC)

CWE-770

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-43768"
CVE-2022-43768 · Resource allocation without limits in…