{"id":"CVE-2022-29884","aliases":["EUVD-2022-34196","GHSA-fc38-5jq6-2248"],"status":"published","title":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c...","description":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions \u003c CPC80 V16.30), CP-8021 MASTER MODULE (All versions \u003c CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions \u003c CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01325,"percentile":0.71338,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-772"],"published":"2022-07-12T10:06:40Z","modified":"2026-06-17T04:40:54Z","products":[{"vendor":"siemens","product":"cp-8000 master module with i/o -25/+70°c"},{"vendor":"siemens","product":"cp-8000 master module with i/o -40/+70°c"},{"vendor":"siemens","product":"cp-8021 master module"},{"vendor":"siemens","product":"cp-8022 master module with gprs"},{"vendor":"siemens","product":"sicam_a8000_cp-8000_firmware"},{"vendor":"siemens","product":"sicam_a8000_cp-8021_firmware"},{"vendor":"siemens","product":"sicam_a8000_cp-8022_firmware"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-491621.pdf","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29884"},{"url":"https://github.com/advisories/GHSA-fc38-5jq6-2248"}],"sources":{"cve":[{"id":"CVE-2022-29884","description":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions \u003c CPC80 V16.30), CP-8021 MASTER MODULE (All versions \u003c CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions \u003c CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.","status":"published","published":"2022-07-12T10:06:40Z","modified":"2024-08-03T06:33:43.055Z","cwes":["CWE-772"],"updated_at":"2026-11-02T14:34:36.270817Z"}],"euvd":[{"id":"EUVD-2022-34196","description":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions \u003c CPC80 V16.30), CP-8021 MASTER MODULE (All versions \u003c CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions \u003c CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.","status":"published","published":"2022-07-12T10:06:40Z","modified":"2024-08-03T06:33:43Z","updated_at":"2026-11-03T03:25:37.579336Z"}],"ghsa":[{"id":"GHSA-fc38-5jq6-2248","title":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c...","description":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions \u003c CPC80 V16.30), CP-8021 MASTER MODULE (All versions \u003c CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions \u003c CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.","status":"published","published":"2022-07-13T00:01:56Z","modified":"2023-01-27T05:05:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:42:41.402468Z"}],"nvd":[{"id":"CVE-2022-29884","description":"A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \u003c CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions \u003c CPC80 V16.30), CP-8021 MASTER MODULE (All versions \u003c CPC80 V16.30), CP-8022 MASTER MODULE WITH GPRS (All versions \u003c CPC80 V16.30). When using the HTTPS server under specific conditions, affected devices do not properly free resources. This could allow an unauthenticated remote attacker to put the device into a denial of service condition.","status":"published","published":"2022-07-12T10:15:10.547Z","modified":"2026-06-17T04:40:54.157Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.1,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:07:23.322724Z"}]}}