Uncontrolled resource consumption in Siemens SIMATIC CP 442-1 RNA
Priority LOW 29CWE-400Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-400.
Summary
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
Why it matters now
EPSS 0.00369 30th percentileScored 2026-11-07
Fix Fixed SIMATIC CP 442-1 RNA (Siemens): V1.5.18SIMATIC CP 443-1 RNA (Siemens): V1.5.18
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 442-1 RNA | before V1.5.18 | V1.5.18 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 RNA | before V1.5.18 | V1.5.18 | Patch available | CNA |
- SIMATIC CP 442-1 RNA VendorSiemens Affected before V1.5.18 Fixed in V1.5.18 Patch available CNA
- SIMATIC CP 443-1 RNA VendorSiemens Affected before V1.5.18 Fixed in V1.5.18 Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_442-1_rna_firmware:*:*:*:*:*:*:*:* | before 1.5.18 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_442-1_rna:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_443-1_rna_firmware:*:*:*:*:*:*:*:* | before 1.5.18 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_443-1_rna:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_442-1_rna_firmware:*:*:*:*:*:*:*:* Versions before 1.5.18 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_442-1_rna:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_443-1_rna_firmware:*:*:*:*:*:*:*:* Versions before 1.5.18 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_443-1_rna:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC CP 442-1 RNA (Siemens) Fixed in V1.5.18
- Fix · CNA SIMATIC CP 443-1 RNA (Siemens) Fixed in V1.5.18
Timeline
- 2026-10-02 Threatist record created from CVE-2022-27640
- 2026-10-03 Alias added: GHSA-26j8-6884-fcqw
References
Sources
- CVE-2022-27640 · CVE Program
- CVE-2022-27640 · NVD
- FIRST EPSS
- GHSA-26j8-6884-fcqw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences