Sign-up

ID

VAR-202207-0627


CVE

CVE-2022-30938


TITLE

Out-of-bounds write vulnerabilities in multiple Siemens products

Trust: 0.8

sources: JVNDB: JVNDB-2022-013681

DESCRIPTION

A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.40), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). Affected applications contains a memory corruption vulnerability while parsing specially crafted HTTP packets to /txtrace endpoint manupulating a specific argument. This could allow an attacker to crash the affected application leading to a denial of service condition

Trust: 1.71

sources: NVD: CVE-2022-30938 // JVNDB: JVNDB-2022-013681 // VULMON: CVE-2022-30938

AFFECTED PRODUCTS

vendor:siemensmodel:en100 ethernet module iec 104scope:eqversion:*

Trust: 1.0

vendor:siemensmodel:en100 ethernet module iec 61850scope:ltversion:4.40

Trust: 1.0

vendor:siemensmodel:en100 ethernet module modbus tcpscope:eqversion:*

Trust: 1.0

vendor:siemensmodel:en100 ethernet module dnp3 ipscope:eqversion:*

Trust: 1.0

vendor:siemensmodel:en100 ethernet module profinet ioscope:eqversion: -

Trust: 1.0

vendor:シーメンスmodel:en100 ethernet モジュール profinet ioscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:en100 ethernet module dnp3 ipscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:en100 ethernet モジュール iec 61850scope: - version: -

Trust: 0.8

vendor:シーメンスmodel:en100 ethernet モジュール modbus tcpscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:en100 ethernet モジュール iec 104scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-013681 // NVD: CVE-2022-30938

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-30938
value: HIGH

Trust: 1.0

NVD: CVE-2022-30938
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202207-937
value: HIGH

Trust: 0.6

VULMON: CVE-2022-30938
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2022-30938
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

nvd@nist.gov: CVE-2022-30938
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2022-30938
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2022-30938 // JVNDB: JVNDB-2022-013681 // CNNVD: CNNVD-202207-937 // NVD: CVE-2022-30938

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.0

problemtype:CWE-787

Trust: 1.0

problemtype:Out-of-bounds writing (CWE-787) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-013681 // NVD: CVE-2022-30938

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202207-937

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202207-937

PATCH

title:Siemens EN100 Ethernet module Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=199901

Trust: 0.6

sources: CNNVD: CNNVD-202207-937

EXTERNAL IDS

db:NVDid:CVE-2022-30938

Trust: 3.3

db:SIEMENSid:SSA-865333

Trust: 2.5

db:ICS CERTid:ICSA-22-195-16

Trust: 1.5

db:JVNid:JVNVU97764115

Trust: 0.8

db:JVNDBid:JVNDB-2022-013681

Trust: 0.8

db:CS-HELPid:SB2022071336

Trust: 0.6

db:CNNVDid:CNNVD-202207-937

Trust: 0.6

db:VULMONid:CVE-2022-30938

Trust: 0.1

sources: VULMON: CVE-2022-30938 // JVNDB: JVNDB-2022-013681 // CNNVD: CNNVD-202207-937 // NVD: CVE-2022-30938

REFERENCES

url:https://cert-portal.siemens.com/productcert/pdf/ssa-865333.pdf

Trust: 2.5

url:https://jvn.jp/vu/jvnvu97764115/

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2022-30938

Trust: 0.8

url:https://www.cisa.gov/news-events/ics-advisories/icsa-22-195-16

Trust: 0.8

url:https://us-cert.cisa.gov/ics/advisories/icsa-22-195-16

Trust: 0.6

url:https://cxsecurity.com/cveshow/cve-2022-30938/

Trust: 0.6

url:https://www.cybersecurity-help.cz/vdb/sb2022071336

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/119.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://www.cisa.gov/uscert/ics/advisories/icsa-22-195-16

Trust: 0.1

sources: VULMON: CVE-2022-30938 // JVNDB: JVNDB-2022-013681 // CNNVD: CNNVD-202207-937 // NVD: CVE-2022-30938

CREDITS

Michael Messner from Siemens Energy reported this vulnerability.

Trust: 0.6

sources: CNNVD: CNNVD-202207-937

SOURCES

db:VULMONid:CVE-2022-30938
db:JVNDBid:JVNDB-2022-013681
db:CNNVDid:CNNVD-202207-937
db:NVDid:CVE-2022-30938

LAST UPDATE DATE

2024-08-14T13:42:36.958000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2022-30938date:2022-07-27T00:00:00
db:JVNDBid:JVNDB-2022-013681date:2023-09-11T08:17:00
db:CNNVDid:CNNVD-202207-937date:2023-06-30T00:00:00
db:NVDid:CVE-2022-30938date:2023-06-29T14:55:34.407

SOURCES RELEASE DATE

db:VULMONid:CVE-2022-30938date:2022-07-12T00:00:00
db:JVNDBid:JVNDB-2022-013681date:2023-09-11T00:00:00
db:CNNVDid:CNNVD-202207-937date:2022-07-12T00:00:00
db:NVDid:CVE-2022-30938date:2022-07-12T10:15:10.600