CVE-2022-21155 HIGH

CVE-2022-21155: Fernhill SCADA Uncontrolled Resource Consumption

Vendor Fernhill

Product SCADA Server

Weakness CWE-400

Published April 12, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing the server process (FHSvrService.exe) to exit.

Key dates

02Disclosure timeline

April 12, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-21155 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2019-9513 Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service CVE-2023-26470 In XWiki Platform, saving a document with a large object number leads to persistent OOM errors CVE-2017-9627 CVE-2025-26652 Windows Standards-Based Storage Management Service Denial of Service Vulnerability CVE-2024-25112 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2