CVE-2023-38380highCWE-401

CVE-2023-38380: falha de alta gravidade em Siemens SIMATIC CP 1242-7 V2 (incl.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SIMATIC CP+ Monitorar SIPLUS NET CP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 1.0%
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) (All versions < V3.0.37), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SINAMICS S210 (6SL5...) (All versions >= V6.1 < V6.1 HF2), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) (All versions < V3.0.37). The webserver implementation of the affected products does not correctly release allocated memory after it has been used. An attacker with network access could use this vulnerability to cause a denial-of-service condition in the webserver of the affected product.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Siemens · SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)Siemens · SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)Siemens · SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)Siemens · SIMATIC CP 1243-1 (incl. SIPLUS variants)Siemens · SIMATIC CP 1243-7 LTESiemens · SIMATIC CP 1243-8 IRCSiemens · SIMATIC CP 1542SP-1Siemens · SIMATIC CP 1542SP-1 IRCSiemens · SIMATIC CP 1543-1Siemens · SIMATIC CP 1543SP-1Siemens · SINAMICS S210 (6SL5...)Siemens · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAILSiemens · SIPLUS ET 200SP CP 1543SP-1 ISECSiemens · SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAILSiemens · SIPLUS NET CP 1543-1
CVEs relacionadas — Siemens SIMATIC CP 1242-7 V2 (incl.

No mesmo produto, das mais perigosas para as menos.

CVE-2017-2680HIGHCVE-2017-2680EPSS 1.1%CVE-2022-43768HIGHCVE-2022-43768EPSS 1.0%CVE-2022-43716HIGHCVE-2022-43716EPSS 1.0%CVE-2017-2681HIGHCVE-2017-2681EPSS 0.9%CVE-2022-43767HIGHCVE-2022-43767EPSS 0.7%CVE-2023-30756HIGHCVE-2023-30756EPSS 0.5%