V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2024-08338
BDU
Medium

Уязвимость веб-сервера микропрограммного обеспечения устройств SIMATIC CP, SIMATIC HMI, SIMATIC IPC, SIMATIC WinCC Runtime Advanced DiagBas…

CVSS
5.9
Medium
EPSS
0.00
p0
Published
2024-01-01
Updated
2024-01-01
Description

Уязвимость веб-сервера микропрограммного обеспечения устройств SIMATIC CP, SIMATIC HMI, SIMATIC IPC, SIMATIC WinCC Runtime Advanced DiagBase, SIPLUS TIM связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании в системе путем манипулирования полем заголовка Expect HTTP запроса

Tags · CWE
Pre-auth
Affected products
Siemens ag Simatic cp 1242-7 v2Siemens ag Simatic cp 1243-1 dnp3Siemens ag Simatic cp 1243-1 iecSiemens ag Simatic cp 1243-1 ircSiemens ag Simatic cp 1243-7 lteSiemens ag Simatic cp 1243-8 ircSiemens ag Simatic hmi comfort panelsSiemens ag Simatic ipc diagbaseSiemens ag Simatic ipc diagmonitorSiemens ag Simatic wincc runtime advancedSiemens ag Siplus tim 1531 irc
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
2024-01-01
Published
2024-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: H
High (H)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Siemens
Simatic Wincc Runtime AdvancedSimatic Hmi Comfort PanelsSimatic Cp 1243-8 IrcSimatic Cp 1243-1 Dnp3Simatic Cp 1243-1 IecSiplus Tim 1531 IrcSimatic Cp 1242-7 V2Simatic Ipc DiagmonitorSimatic Ipc DiagbaseSimatic Cp 1243-1 Irc+1
ProductVendorStatus
simatic cp 1242-7 v2siemens agTracked
simatic cp 1243-1 dnp3siemens agTracked
simatic cp 1243-1 iecsiemens agTracked
simatic cp 1243-1 ircsiemens agTracked
simatic cp 1243-7 ltesiemens agTracked
simatic cp 1243-8 ircsiemens agTracked
simatic hmi comfort panelssiemens agTracked
simatic ipc diagbasesiemens agTracked
simatic ipc diagmonitorsiemens agTracked
simatic wincc runtime advancedsiemens agTracked
siplus tim 1531 ircsiemens agTracked
Source databases
BDU
Related vulnerabilities
CVE-2023-30756