Products
SIMATIC IPC DiagBase
SIMATIC IPC DiagMonitor
SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
- < V3.5.20
SIMATIC CP 1243-1 (incl. SIPLUS variants)
- < V3.5.20
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
- < V3.5.20
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
- < V3.5.20
SIMATIC CP 1243-7 LTE
- < V3.5.20
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
- < V3.5.20
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
SIMATIC WinCC Runtime Advanced
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
- < V2.4.8
TIM 1531 IRC (6GK7543-1MX00-0XE0)
- < V2.4.8
Source
productcert@siemens.com
Tags
CVE-2023-28827 details
Last Modified : Sept. 10, 2024, 12:09 p.m.
Description
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. This could allow a remote attacker to cause a denial of service condition in the system.
CVSS Score
1 | 2 | 3 | 4 | 5.9 | 6 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|---|---|
CWE-476 | NULL Pointer Dereference | A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
5.9
Exploitability Score
2.2
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References
URL | Source |
---|---|
https://cert-portal.siemens.com/productcert/html/ssa-423808.html | productcert@siemens.com |