The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent that causes a mass denial-of-service attack on all CME8000 devices connected to the same network.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2022-09-13T14:54:50.356065Z
Updated: 2024-09-16T23:46:02.272Z
Reserved: 2022-08-29T00:00:00
Link: CVE-2022-38100
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-09-13T15:15:08.843
Modified: 2023-07-21T20:05:36.150
Link: CVE-2022-38100
Redhat
No data.