Detections
Analytics
Siemens SIMATIC and SIPLUS Products Buffer Access with Incorrect Length Value (CVE-2022-47375)
high Tenable OT Security Plugin ID 501854
Synopsis
The remote OT asset is affected by a vulnerability.Description
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle long file names correctly. This could allow an attacker to create a buffer overflow and create a denial of service condition for the device.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.Siemens recommends updating the following products to the latest version where available:
- SINAMICS S120 (incl. SIPLUS variants): Update to V5.2 SP3 HF15 or later version
Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:
- Disable the web server of the affected system
- Restrict access to webserver for trusted users only
As a general security measure, Siemens recommends protecting network access to devices with appropriate mechanisms. To operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens' operational guidelines for industrial security and following recommendations in the product manuals.
Additional information on industrial security by Siemens can be found on the Siemens industrial security webpage.
For more information see the associated Siemens security advisory SSA-892915 in HTML and CSAF.
See Also
https://cert-portal.siemens.com/productcert/pdf/ssa-892915.pdf
https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-05
Plugin Details
Severity: High
ID: 501854
File Name: tenable_ot_siemens_CVE-2022-47375.nasl
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 1/4/2024
Updated: 2/14/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2022-47375
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:siemens:simatic_s7-400_cpu_414f-3_pn%2fdp_firmware, cpe:/o:siemens:siplus_s7-400_cpu_416-3_pn%2fdp_firmware, cpe:/o:siemens:simatic_s7-400_cpu_416f-3_pn%2fdp_firmware, cpe:/o:siemens:siplus_s7-400_cpu_414-3_pn%2fdp_firmware, cpe:/o:siemens:simatic_s7-400_cpu_412-2_pn_firmware, cpe:/o:siemens:simatic_s7-400_cpu_416-3_pn%2fdp_firmware, cpe:/o:siemens:simatic_s7-400_cpu_414-3_pn%2fdp_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 12/12/2023
Vulnerability Publication Date: 12/12/2023
Reference Information
CVE: CVE-2022-47375