{"id":"CVE-2022-27194","aliases":["EUVD-2022-31727","GHSA-96gp-ff96-gm4r"],"status":"published","title":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c...","description":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01432,"percentile":0.73266,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2022-04-12T09:07:59Z","modified":"2026-06-17T04:36:28Z","products":[{"vendor":"siemens","product":"simatic pcs neo (administration console)"},{"vendor":"siemens","product":"simatic_pcs_neo"},{"vendor":"siemens","product":"sinetplan"},{"vendor":"siemens","product":"tia portal"},{"vendor":"siemens","product":"totally_integrated_automation_portal"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-711829.pdf","tags":["x_refsource_MISC","x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27194"},{"url":"https://github.com/advisories/GHSA-96gp-ff96-gm4r"}],"sources":{"cve":[{"id":"CVE-2022-27194","description":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","status":"published","published":"2022-04-12T09:07:59Z","modified":"2024-08-03T05:25:31.062Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-31727","description":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","status":"published","published":"2022-04-12T09:07:59Z","modified":"2024-08-03T05:25:31Z","updated_at":"2026-11-03T03:25:43.539822Z"}],"ghsa":[{"id":"GHSA-96gp-ff96-gm4r","title":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c...","description":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","status":"published","published":"2022-04-13T00:00:31Z","modified":"2023-01-27T05:01:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:41:55.318028Z"}],"nvd":[{"id":"CVE-2022-27194","description":"A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions \u003c V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17). The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this vulnerability to cause a Denial-of-Service condition. The affected devices must be restarted manually.","status":"published","published":"2022-04-12T09:15:15.017Z","modified":"2026-06-17T04:36:28.68Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:15.414503Z"}]}}