- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference.
This could allow a remote attacker with no privileges to cause a denial of service condition in the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
- Vendor
- Siemens
- Product
- SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC CP 1243-1 (incl. SIPLUS variants)
- Vendor
- Siemens
- Product
- SIMATIC CP 1243-1 (incl. SIPLUS variants)
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1243-1 (incl. SIPLUS variants) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
- Vendor
- Siemens
- Product
- SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
- Vendor
- Siemens
- Product
- SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC CP 1243-7 LTE
- Vendor
- Siemens
- Product
- SIMATIC CP 1243-7 LTE
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1243-7 LTE · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC CP 1243-8 IRC
- Vendor
- Siemens
- Product
- SIMATIC CP 1243-8 IRC
- Platforms
- Unknown
- Default status
unknown
SIMATIC CP 1243-8 IRC · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V3.5.20 | Unavailable | None listed |
|---|
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
- Vendor
- Siemens
- Product
- SIMATIC HMI Comfort Panels (incl. SIPLUS variants)
- Platforms
- Unknown
- Default status
unknown
SIMATIC HMI Comfort Panels (incl. SIPLUS variants) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SIMATIC IPC DiagBase
- Vendor
- Siemens
- Product
- SIMATIC IPC DiagBase
- Platforms
- Unknown
- Default status
unknown
SIMATIC IPC DiagBase · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | * | Unavailable | None listed |
|---|
SIMATIC IPC DiagMonitor
- Vendor
- Siemens
- Product
- SIMATIC IPC DiagMonitor
- Platforms
- Unknown
- Default status
unknown
SIMATIC IPC DiagMonitor · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SIMATIC WinCC Runtime Advanced
- Vendor
- Siemens
- Product
- SIMATIC WinCC Runtime Advanced
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC Runtime Advanced · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| All versions | affected | Unavailable | Unavailable | Unavailable | None listed |
|---|
SIPLUS TIM 1531 IRC
- Vendor
- Siemens
- Product
- SIPLUS TIM 1531 IRC
- Platforms
- Unknown
- Default status
unknown
SIPLUS TIM 1531 IRC · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2.4.8 | Unavailable | None listed |
|---|
TIM 1531 IRC
- Vendor
- Siemens
- Product
- TIM 1531 IRC
- Platforms
- Unknown
- Default status
unknown
TIM 1531 IRC · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2.4.8 | Unavailable | None listed |
|---|