CVE-2022-40225

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-40225
A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-337522.html
Configurations

No configuration.

History

13 Jun 2024, 18:36

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-337522.html -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
Summary
  • (es) **RECHAZADA** NO UTILICE ESTE NÚMERO DE CANDIDATO. ID de consulta: ninguno. Motivo: Este candidato fue retirado por su CNA. Una investigación más exhaustiva demostró que no se trataba de un problema de seguridad. Notas: ninguna.
Summary (en) Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. (en) A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of service condition on affected devices.
CWE CWE-681
Information

Published : 2022-11-10 22:15

Updated : 2024-06-13 18:36

NVD link : CVE-2022-40225

Mitre link : CVE-2022-40225

CVE.ORG link : CVE-2022-40225

JSON object : View

Products Affected

No product.

CWE
CWE-681

Incorrect Conversion between Numeric Types