Description
A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming attacks, which can cause the device to reboot.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC CP 442-1 RNA | All versions < V1.5.18 | — |
| Siemens | SIMATIC CP 443-1 RNA | All versions < V1.5.18 | — |
Advisories 2
- ICSA-22-132-11 Siemens SIMATIC CP 44x-1 RNA CISA ICS & IT advisories · May 6, 2025
- SSA-480937 SSA-480937: Denial of Service Vulnerability in CP 44x-1 RNA before V1.5.18 Siemens ProductCERT · May 10, 2022