CVE-2022-40225

A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-337522.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*

History

24 Jun 2024, 19:39

Type	Values Removed	Values Added
First Time		Siemens Siemens siplus Tim 1531 Irc Firmware Siemens siplus Tim 1531 Irc
CVSS	v2 : ~~unknown~~ v3 : ~~6.5~~	v2 : unknown v3 : 7.5
CPE		cpe:2.3:h:siemens:siplus_tim_1531_irc:-:::::::* cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware::::::::
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-337522.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-337522.html - Patch, Vendor Advisory

11 Jun 2024, 15:15

Type	Values Removed	Values Added
Summary		(es) RECHAZADA NO UTILICE ESTE NÚMERO DE CANDIDATO. ID de consulta: ninguno. Motivo: Este candidato fue retirado por su CNA. Una investigación más exhaustiva demostró que no se trataba de un problema de seguridad. Notas: ninguna.
Summary	~~(en) Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.~~	(en) A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.
CWE		CWE-681
References		() https://cert-portal.siemens.com/productcert/html/ssa-337522.html -
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5

07 Nov 2023, 03:52

Type	Values Removed	Values Added
Summary	REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.	Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Information

Published : 2022-11-10 22:15

Updated : 2024-06-24 19:39

NVD link : CVE-2022-40225

Mitre link : CVE-2022-40225

CVE.ORG link : CVE-2022-40225

JSON object : View

Products Affected

siemens

siplus_tim_1531_irc_firmware
siplus_tim_1531_irc

CWE

CWE-681

Incorrect Conversion between Numeric Types

7.5 /10