7.5

CVE-2022-34661

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamcenter V13.1 (All versions < V13.1.0.10), Teamcenter V13.2 (All versions < V13.2.0.9), Teamcenter V13.3 (All versions < V13.3.0.5), Teamcenter V14.0 (All versions < V14.0.0.2). File Server Cache service in Teamcenter is vulnerable to denial of service by entering infinite loops and using up CPU cycles. This could allow an attacker to cause denial of service condition.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Siemens ≫ Teamcenter Version >= 12.4 < 12.4.0.15
Siemens ≫ Teamcenter Version >= 13.0 < 13.0.0.10
Siemens ≫ Teamcenter Version >= 13.1 < 13.1.0.10
Siemens ≫ Teamcenter Version >= 13.2 < 13.2.0.9
Siemens ≫ Teamcenter Version >= 13.3 < 13.3.0.5
Siemens ≫ Teamcenter Version >= 14.0 < 14.0.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.499
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdf
Vendor Advisory
Mitigation