Headline
CVE-2022-27640
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests.
This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
%PDF-1.5 %���� 1 0 obj << /D [2 0 R /XYZ 70.866 771.024 null] >> endobj 3 0 obj << /D [2 0 R /XYZ 70.866 630.026 null] >> endobj 4 0 obj << /D [2 0 R /XYZ 70.866 581.902 null] >> endobj 5 0 obj << /D [2 0 R /XYZ 70.866 400.247 null] >> endobj 6 0 obj << /D [2 0 R /XYZ 70.866 341.164 null] >> endobj 7 0 obj << /D [8 0 R /XYZ 85.039 487.439 null] >> endobj 9 0 obj << /D [8 0 R /XYZ 70.866 300.003 null] >> endobj 10 0 obj << /S /GoTo /D [2 0 R /Fit] >> endobj 2 0 obj << /Contents 11 0 R /Type /Page /Resources 12 0 R /Parent 13 0 R /Annots [14 0 R 15 0 R 16 0 R 17 0 R 18 0 R 19 0 R 20 0 R 21 0 R 22 0 R] /MediaBox [0 0 595.276 841.89] >> endobj 14 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109808794/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 482.43 518.276 493.847] >> endobj 16 0 obj << /A << /S /URI /Type /Action /URI (https://support.industry.siemens.com/cs/ww/en/view/109808796/) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [303.117 433.018 518.276 444.435] >> endobj 18 0 obj << /A << /S /GoTo /D (section*.2) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [386.143 357.981 524.579 369.517] >> endobj 19 0 obj << /A << /S /GoTo /D (section*.4) >> /Subtype /Link /C [1 0 0] /Type /Annot /H /I /Border [0 0 0] /Rect [147.498 340.168 309.548 351.585] >> endobj 20 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/cert/operational-guidelines-industrial-security) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [164.798 249.092 487.754 260.628] >> endobj 21 0 obj << /A << /S /URI /Type /Action /URI (https://www.siemens.com/industrialsecurity) >> /C [0 1 1] /Subtype /Link /Type /Annot /H /I /Border [0 0 0] /Rect [406.699 219.323 525.406 230.74] >> endobj 12 0 obj << /ProcSet [/PDF /Text] /Font << /F50 23 0 R /F47 24 0 R >> >> endobj 11 0 obj << /Filter /FlateDecode /Length 2506 >> stream x��ZKs�F��W�`U8��õFR\J,�KRޤ� `�Q�@. Jɿ��E� ��=H����{��M�4�Oh�������O�$�8�u2�K %V��8G3�t�|L’E�������N��v=2��_ah4,6K4�C�|wߘ�~��og���xoO�O>����� ��g��������i2��~N(�&O�͇D*A�p�H&g�:�Q��ڐ��� ��K�������@� N�o ��6h2JK�0��bJ��,���Y�= �*d �!t~ƍl*p��E�8��)'��Z�8�Z�sj�એ��;��0�U��7�D:~p�p�G���K� ��hs�59�M �Yޢ��D�������`��oP�8T��@�t�(�u��X`B8�ChN(��!�&R�^>�j\� (L�ԣ([�K�0’�r�Kw�U�8SL4�_�?.!h�ԧ�h����&Lv&L�3@��Y rH_Fʓ�KC�镲T�:��0�\�����%OJ��2b�%J����B� &��� V��:o���B x RY��(e�TH��a�C�`2�� ��B�!dK ���|��\bQ̲�X��E\fU� ���<�ŇTA&E�8�1� ��d�*̹]��,e�ʬ��z��q⇁�i����0[2�P��y &�0�Q�~�6y$B3�=�0Z��X/���M]%G�iq X�`?�`wZ�ۛ��x�h�.~hx�l�0 �j-�~h�@+�/Y�Y� 4��H�0X�gO��q�u�_��"_ć�K nfˇ���m���0�Z/g�f^���E ׆��!��[��(7�O��?�m�4ܳ��)l 0M�cw��4DS�5? e��l�]��m�X,@���ctѬ��Z�����KX��ٶ����