CVE-2023-28827

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Sep 10, 2024
Source updated: Sep 10, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. This could allow a remote attacker to cause a denial of service condition in the system.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
Platforms: Unknown
Default status: unknown

SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC CP 1243-1 (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC CP 1243-1 (incl. SIPLUS variants)
Platforms: Unknown
Default status: unknown

SIMATIC CP 1243-1 (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Platforms: Unknown
Default status: unknown

SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Platforms: Unknown
Default status: unknown

SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC CP 1243-7 LTE

Vendor: Siemens
Product: SIMATIC CP 1243-7 LTE
Platforms: Unknown
Default status: unknown

SIMATIC CP 1243-7 LTE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC CP 1243-8 IRC

Vendor: Siemens
Product: SIMATIC CP 1243-8 IRC
Platforms: Unknown
Default status: unknown

SIMATIC CP 1243-8 IRC · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5.20	Unavailable	None listed

SIMATIC HMI Comfort Panels (incl. SIPLUS variants)

Vendor: Siemens
Product: SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Platforms: Unknown
Default status: unknown

SIMATIC HMI Comfort Panels (incl. SIPLUS variants) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC IPC DiagBase

Vendor: Siemens
Product: SIMATIC IPC DiagBase
Platforms: Unknown
Default status: unknown

SIMATIC IPC DiagBase · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

SIMATIC IPC DiagMonitor

Vendor: Siemens
Product: SIMATIC IPC DiagMonitor
Platforms: Unknown
Default status: unknown

SIMATIC IPC DiagMonitor · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIMATIC WinCC Runtime Advanced

Vendor: Siemens
Product: SIMATIC WinCC Runtime Advanced
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Advanced · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
All versions	`affected`	Unavailable	Unavailable	Unavailable	None listed

SIPLUS TIM 1531 IRC

Vendor: Siemens
Product: SIPLUS TIM 1531 IRC
Platforms: Unknown
Default status: unknown

SIPLUS TIM 1531 IRC · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V2.4.8	Unavailable	None listed

TIM 1531 IRC

Vendor: Siemens
Product: TIM 1531 IRC
Platforms: Unknown
Default status: unknown

TIM 1531 IRC · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V2.4.8	Unavailable	None listed