The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast request could be sent that causes a mass denial-of-service attack on all CME8000 devices connected to the same network.
References
Link | Resource |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsma-22-244-01 | Mitigation Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: icscert
Published: 2022-09-01T00:00:00
Updated: 2022-09-13T14:54:50
Reserved: 2022-08-29T00:00:00
Link: CVE-2022-38100
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-09-13T15:15:08.843
Modified: 2023-07-21T20:05:36.150
Link: CVE-2022-38100
JSON object: View
Redhat Information
No data.
CWE