CVSS 3.1
5.3 mediumCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-27481
Medium (5.3) in siemens. EPSS 0.2% chance of exploitation in the next 30 days.
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0). Affected devices do not properly handle resources of ARP requests. This could allow an attacker to cause a race condition that leads to a crash of the entire device.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- siemens:scalance_w1788-1_m12_firmware
- siemens:scalance_w1788-2_eec_m12_firmware
- siemens:scalance_w1788-2_m12_firmware
- siemens:scalance_w1788-2ia_m12_firmware