vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-47374

HIGH
7.5
CVSS Score
Published: December 12, 2023 at 11:25 AM UTC
Updated: June 17, 2026 at 05:13 AM UTC
25 products affected across 1 vendorSinamics S120 Firmware6AG1414 3EM07 7AB0 Firmware6ES7416 3FS07 0AB0 Firmware

Using SIMATIC PC-Station Plus by Siemens?

Get instant alerts when new vulnerabilities affect SIMATIC PC-Station Plus - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 0.7%
SSVC
No known exploit

Description

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416F-3 PN/DP V7 (All versions), SINAMICS S120 (incl. SIPLUS variants) (All versions < V5.2 SP3 HF15), SIPLUS S7-400 CPU 414-3 PN/DP V7 (All versions), SIPLUS S7-400 CPU 416-3 PN/DP V7 (All versions). The affected products do not handle HTTP(S) requests to the web server correctly. This could allow an attacker to exhaust system resources and create a denial of service condition for the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6AG1414 3EM07 7AB0 Firmware· Siemens
95%
All versions
siemens-6ag1414-3em07-7ab0 (same device)
6AG1416 3ES07 7AB0 Firmware· Siemens
95%
All versions
siemens-6ag1416-3es07-7ab0 (same device)
6ES7412 2EK07 0AB0 Firmware· Siemens
95%
All versions
siemens-6es7412-2ek07-0ab0 (same device)
6ES7414 3EM07 0AB0 Firmware· Siemens
95%
All versions
siemens-6es7414-3em07-0ab0 (same device)
6ES7414 3FM07 0AB0 Firmware· Siemens
95%
All versions
siemens-6es7414-3fm07-0ab0 (same device)
6ES7416 3ES07 0AB0 Firmware· Siemens
95%
All versions
siemens-6es7416-3es07-0ab0 (same device)
6ES7416 3FS07 0AB0 Firmware· Siemens
95%
All versions
siemens-6es7416-3fs07-0ab0 (same device)
SIMATIC Pc Station Plus Firmware· Siemens
95%
All versions
siemens-simatic-pc-station-plus (same device)
Sinamics S120 Firmware· Siemens
95%
4.74.84.95.05.1 sp15.1 sp1_hotfix15.1 sp1_hotfix135.25.2 hotfix15.2 hotfix115.2 hotfix75.2 sp35.2 sp3_hotfix15.2 sp3_hotfix135.2 sp3_hotfix65.2 sp3_hotfix9
siemens-sinamics-s120 (same device)
SIMATIC S7-400 CPU 412-2 Pn· Siemens
60%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-892915.pdf

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-674

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card