CVE-2023-35920highCWE-400

CVE-2023-35920: falha de alta gravidade em Siemens SIMATIC MV540 H

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC MV540 H+ Monitorar SIMATIC MV540 S

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.9%
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Produtos afetados
Siemens · SIMATIC MV540 HSiemens · SIMATIC MV540 SSiemens · SIMATIC MV550 HSiemens · SIMATIC MV550 SSiemens · SIMATIC MV560 USiemens · SIMATIC MV560 X
CVEs relacionadas — Siemens SIMATIC MV540 H

No mesmo produto, das mais perigosas para as menos.

CVE-2020-28400HIGHCVE-2020-28400EPSS 1.9%CVE-2022-33138—CVE-2022-33138EPSS 1.3%CVE-2023-35921HIGHCVE-2023-35921EPSS 0.9%CVE-2022-33137—CVE-2022-33137EPSS 0.9%CVE-2023-36521HIGHCVE-2023-36521EPSS 0.6%