Vulnerability-Lookup

CVE-2022-43768 (GCVE-0-2022-43768)

Vulnerability from cvelistv5 – Published: 2023-04-11 09:02 – Updated: 2025-02-07 16:51

Summary

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

siemens

References

3 references

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

23 products

Vendor	Product	Version
Siemens	SIMATIC CP 1242-7 V2	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-1	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-7 LTE EU	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-7 LTE US	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1243-8 IRC	Affected: 0 , < V3.4.29 (custom)
Siemens	SIMATIC CP 1542SP-1	Affected: 0 , < V2.3 (custom)
Siemens	SIMATIC CP 1542SP-1 IRC	Affected: 0 , < V2.3 (custom)
Siemens	SIMATIC CP 1543SP-1	Affected: 0 , < V2.3 (custom)
Siemens	SIMATIC CP 443-1	Affected: 0 , < V3.3 (custom)
Siemens	SIMATIC CP 443-1	Affected: 0 , < V3.3 (custom)
Siemens	SIMATIC CP 443-1 Advanced	Affected: 0 , < V3.3 (custom)
Siemens	SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL	Affected: 0 , < V2.3 (custom)
Siemens	SIPLUS ET 200SP CP 1543SP-1 ISEC	Affected: 0 , < V2.3 (custom)
Siemens	SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL	Affected: 0 , < V2.3 (custom)
Siemens	SIPLUS NET CP 1242-7 V2	Affected: 0 , < V3.4.29 (custom)
Siemens	SIPLUS NET CP 443-1	Affected: 0 , < V3.3 (custom)
Siemens	SIPLUS NET CP 443-1 Advanced	Affected: 0 , < V3.3 (custom)
Siemens	SIPLUS S7-1200 CP 1243-1	Affected: 0 , < V3.4.29 (custom)
Siemens	SIPLUS S7-1200 CP 1243-1 RAIL	Affected: 0 , < V3.4.29 (custom)
Siemens	SIPLUS TIM 1531 IRC	Affected: 0 , < V2.3.6 (custom)
Siemens	TIM 1531 IRC	Affected: 0 , < V2.3.6 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:40:06.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-43768",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T16:50:58.868618Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-07T16:51:07.850Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1242-7 V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-7 LTE EU",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-7 LTE US",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-8 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1542SP-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1542SP-1 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1543SP-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 443-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 443-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 443-1 Advanced",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CP 1543SP-1 ISEC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET CP 1242-7 V2",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET CP 443-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS NET CP 443-1 Advanced",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1200 CP 1243-1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS S7-1200 CP 1243-1 RAIL",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.4.29",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS TIM 1531 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIM 1531 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.3.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions \u003c V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions \u003c V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions \u003c V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-10T09:33:34.861Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
        },
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-43768",
    "datePublished": "2023-04-11T09:02:51.623Z",
    "dateReserved": "2022-10-26T11:27:16.347Z",
    "dateUpdated": "2025-02-07T16:51:07.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-43768",
      "date": "2026-05-30",
      "epss": "0.00645",
      "percentile": "0.71041"
    },
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"840C5C25-1E34-42FA-8221-7232622C204F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"29D4C72C-4E84-4563-9D66-5C641AB996BA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FE3D7928-8E1A-400E-B790-58D6F5938E3C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CA9BB25C-D5E3-43DE-8C73-06BDC43CA960\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2FFBFB96-1A35-4724-831B-68E3A9C32921\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE5003DA-5488-47C1-B442-9137E849FDD5\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DFE96226-A2DF-4A9E-8CBB-8D7CF328E404\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"93D43BC6-EDE3-4EE1-9410-4717EB641AD0\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"651C66E8-B3C0-4E88-BC7C-30BF16A7F7A3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"786F3FFD-87E4-45B9-A33C-BAE58379FF39\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF9224A6-8A35-4F4F-951F-5B24B89E5FC8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F2AA6B43-7FC7-465A-9CD8-E8A4D6DBCD27\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"12A45F37-1E7D-4748-ADAC-EC4C454B693A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C1F51B86-57EE-4DB6-B038-06726BC93D2D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0C868560-8BAE-462D-AED0-3C52EA9B6DB8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8648EF79-043D-48DE-B9F8-BF762862EE99\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E362CEA5-F47B-4294-8F2D-A0A7AC6FF390\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C8B5C37-200C-4531-8876-3E05F3DE3EC8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"843A8686-5172-4782-BB97-B5D3C6FB27A3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"BCDA714C-5851-4E35-806F-E0C651A1E87A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F58423D0-954E-426E-9F8F-3DD95FBDF50C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"418A9C80-BEFD-4A1F-B1BB-6C45A9267A44\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E478FE71-32D1-4FE4-8AC9-1C898EFFD0B3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"530FD06D-E020-4EB3-87DD-F7B2FEE58008\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8784BA58-12BF-4F1C-94D6-2D15933703C8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"91371CD0-EBDF-43C5-A262-A46E1C343716\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A5E06833-4C26-40AC-B6CF-F7D1322462D6\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE009635-7EC7-4A2F-B1FA-DD75213A25CA\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF3E5DDA-1BD4-4511-A2C8-4B5D40E6755E\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9054A7B6-9569-4D65-9695-A0FFA4F56C74\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A60FC550-A518-46BF-9124-E21DD654981C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4F488C27-C8B9-4238-8409-AB7ACA3BC849\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"25634AD2-2CC0-45AF-B5DE-39D30CBA91A4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7FE26E32-47C0-4976-A23A-07C1AE318C35\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"116E84DA-31F7-4AAC-A1AE-491C4C98BD49\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"45B95689-C355-4CF1-AE7A-0860E4CEA11A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"21F04D79-5815-4D36-8AA5-4866751D0DDB\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.3\", \"matchCriteriaId\": \"94CC55CF-9BA3-4BE7-9654-F6B6C4F0DA62\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2498071A-6540-4147-8D01-3B81A5CE9A57\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E700BF4C-64B1-455C-A6A6-3E4D71FB91B7\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F9E746CF-4009-4A14-8916-A9E0276CAF8B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9B3C83EF-5D93-4F0B-80F9-997261F3DBA9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A294530-727C-4535-8B02-668DF74587D4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.3.6\", \"matchCriteriaId\": \"2C616E50-1F96-4A87-8470-1BA8732FCB77\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"074FDC9C-CB36-4C67-82C8-1B930FF1269F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"2.3.6\", \"matchCriteriaId\": \"4646AF8C-B871-4F9E-85A4-ECE8F13AFB21\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C1D94BEB-BBFB-4258-9835-87DBBB999239\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions \u003c V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions \u003c V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions \u003c V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.\"}]",
      "id": "CVE-2022-43768",
      "lastModified": "2024-11-21T07:27:11.733",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"productcert@siemens.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}]}",
      "published": "2023-04-11T10:15:17.617",
      "references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\", \"source\": \"productcert@siemens.com\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\", \"source\": \"productcert@siemens.com\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\", \"source\": \"productcert@siemens.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "productcert@siemens.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-770\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-43768\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2023-04-11T10:15:17.617\",\"lastModified\":\"2024-11-21T07:27:11.733\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions \u003c V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions \u003c V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions \u003c V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"840C5C25-1E34-42FA-8221-7232622C204F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29D4C72C-4E84-4563-9D66-5C641AB996BA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE3D7928-8E1A-400E-B790-58D6F5938E3C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA9BB25C-D5E3-43DE-8C73-06BDC43CA960\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FFBFB96-1A35-4724-831B-68E3A9C32921\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE5003DA-5488-47C1-B442-9137E849FDD5\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DFE96226-A2DF-4A9E-8CBB-8D7CF328E404\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93D43BC6-EDE3-4EE1-9410-4717EB641AD0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"651C66E8-B3C0-4E88-BC7C-30BF16A7F7A3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"786F3FFD-87E4-45B9-A33C-BAE58379FF39\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF9224A6-8A35-4F4F-951F-5B24B89E5FC8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2AA6B43-7FC7-465A-9CD8-E8A4D6DBCD27\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12A45F37-1E7D-4748-ADAC-EC4C454B693A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1F51B86-57EE-4DB6-B038-06726BC93D2D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C868560-8BAE-462D-AED0-3C52EA9B6DB8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8648EF79-043D-48DE-B9F8-BF762862EE99\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E362CEA5-F47B-4294-8F2D-A0A7AC6FF390\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C8B5C37-200C-4531-8876-3E05F3DE3EC8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"843A8686-5172-4782-BB97-B5D3C6FB27A3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"BCDA714C-5851-4E35-806F-E0C651A1E87A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F58423D0-954E-426E-9F8F-3DD95FBDF50C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"418A9C80-BEFD-4A1F-B1BB-6C45A9267A44\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E478FE71-32D1-4FE4-8AC9-1C898EFFD0B3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"530FD06D-E020-4EB3-87DD-F7B2FEE58008\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8784BA58-12BF-4F1C-94D6-2D15933703C8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91371CD0-EBDF-43C5-A262-A46E1C343716\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5E06833-4C26-40AC-B6CF-F7D1322462D6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE009635-7EC7-4A2F-B1FA-DD75213A25CA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF3E5DDA-1BD4-4511-A2C8-4B5D40E6755E\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9054A7B6-9569-4D65-9695-A0FFA4F56C74\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A60FC550-A518-46BF-9124-E21DD654981C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F488C27-C8B9-4238-8409-AB7ACA3BC849\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"25634AD2-2CC0-45AF-B5DE-39D30CBA91A4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FE26E32-47C0-4976-A23A-07C1AE318C35\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"116E84DA-31F7-4AAC-A1AE-491C4C98BD49\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"45B95689-C355-4CF1-AE7A-0860E4CEA11A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21F04D79-5815-4D36-8AA5-4866751D0DDB\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"94CC55CF-9BA3-4BE7-9654-F6B6C4F0DA62\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2498071A-6540-4147-8D01-3B81A5CE9A57\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E700BF4C-64B1-455C-A6A6-3E4D71FB91B7\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9E746CF-4009-4A14-8916-A9E0276CAF8B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B3C83EF-5D93-4F0B-80F9-997261F3DBA9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A294530-727C-4535-8B02-668DF74587D4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.3.6\",\"matchCriteriaId\":\"2C616E50-1F96-4A87-8470-1BA8732FCB77\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"074FDC9C-CB36-4C67-82C8-1B930FF1269F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.3.6\",\"matchCriteriaId\":\"4646AF8C-B871-4F9E-85A4-ECE8F13AFB21\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1D94BEB-BBFB-4258-9835-87DBBB999239\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\",\"source\":\"productcert@siemens.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T13:40:06.422Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-43768\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-07T16:50:58.868618Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-07T16:50:50.408Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C\"}}], \"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1242-7 V2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-7 LTE EU\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-7 LTE US\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-8 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1542SP-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1542SP-1 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1543SP-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 443-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 443-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 443-1 Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS ET 200SP CP 1543SP-1 ISEC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET CP 1242-7 V2\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET CP 443-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS NET CP 443-1 Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CP 1243-1\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1200 CP 1243-1 RAIL\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.4.29\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS TIM 1531 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3.6\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"TIM 1531 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.3.6\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-139628.html\"}, {\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-566905.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions \u003c V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions \u003c V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions \u003c V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"shortName\": \"siemens\", \"dateUpdated\": \"2024-09-10T09:33:34.861Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-43768\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-07T16:51:07.850Z\", \"dateReserved\": \"2022-10-26T11:27:16.347Z\", \"assignerOrgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"datePublished\": \"2023-04-11T09:02:51.623Z\", \"assignerShortName\": \"siemens\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2023-AVI-0298

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	Solid Edge SE2023 avec KeyShot 11 versions antérieures à V2023.1
Siemens	N/A	TIA Portal V18 versions antérieures à V18 Update 1
Siemens	N/A	TeleControl Server Basic V3
Siemens	N/A	Polarion ALM versions antérieures à V2304.0
Siemens	N/A	CP-8031 MASTER MODULE (6MF2803-1AA00) et CP-8050 MASTER MODULE (6MF2805-0AA00) versions antérieures à CPCI85 V05
Siemens	N/A	TIA Portal V15, V16 et V17
Siemens	N/A	JT2Go versions antérieures à V14.2.0.2
Siemens	N/A	De nombreuses références SIPROTEC, SCALANCE, SIMATIC et SIPLUS, se référer aux bulletins de sécurité de l'éditeur pour la liste complète
Siemens	N/A	SIMATIC S7-400 PN/DP CPU family
Siemens	N/A	Teamcenter Visualization V13.2 versions antérieures à V13.2.0.13
Siemens	N/A	Mendix Forgot Password (Mendix 8 compatible) versions antérieures à V4.1.1
Siemens	N/A	Mendix Forgot Password (Mendix 9 compatible) versions antérieures à V5.1.1
Siemens	N/A	SIMATIC CP 443-1 Advanced versions antérieures à V3.2.17
Siemens	N/A	SIMATIC CP 343-1 Advanced versions antérieures à V3.0.53
Siemens	N/A	Teamcenter Visualization V14.0 versions antérieures à V14.0.0.5
Siemens	N/A	SCALANCE XCM332 (6GK5332-0GA01-2AC2) versions antérieures à V2.2
Siemens	N/A	JT Open versions antérieures à V11.3.2.0
Siemens	N/A	Teamcenter Visualization V14.2 versions antérieures à V14.2.0.2
Siemens	N/A	Mendix Forgot Password (Mendix 7 compatible) versions antérieures à V3.7.1
Siemens	N/A	JT Utilities versions antérieures à V13.3.0.0
Siemens	N/A	Teamcenter Visualization V13.3 versions antérieures à V13.3.0.9
Siemens	N/A	OpenPCS 7 V9.1
Siemens	N/A	SIMATIC S7-300 CPU family versions antérieures à V3.X.18
Siemens	N/A	Teamcenter Visualization V14.1 versions antérieures à V14.1.0.7

References

Title

Publication Time

CERTFR-2023-AVI-0298

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	Solid Edge SE2023 avec KeyShot 11 versions antérieures à V2023.1
Siemens	N/A	TIA Portal V18 versions antérieures à V18 Update 1
Siemens	N/A	TeleControl Server Basic V3
Siemens	N/A	Polarion ALM versions antérieures à V2304.0
Siemens	N/A	CP-8031 MASTER MODULE (6MF2803-1AA00) et CP-8050 MASTER MODULE (6MF2805-0AA00) versions antérieures à CPCI85 V05
Siemens	N/A	TIA Portal V15, V16 et V17
Siemens	N/A	JT2Go versions antérieures à V14.2.0.2
Siemens	N/A	De nombreuses références SIPROTEC, SCALANCE, SIMATIC et SIPLUS, se référer aux bulletins de sécurité de l'éditeur pour la liste complète
Siemens	N/A	SIMATIC S7-400 PN/DP CPU family
Siemens	N/A	Teamcenter Visualization V13.2 versions antérieures à V13.2.0.13
Siemens	N/A	Mendix Forgot Password (Mendix 8 compatible) versions antérieures à V4.1.1
Siemens	N/A	Mendix Forgot Password (Mendix 9 compatible) versions antérieures à V5.1.1
Siemens	N/A	SIMATIC CP 443-1 Advanced versions antérieures à V3.2.17
Siemens	N/A	SIMATIC CP 343-1 Advanced versions antérieures à V3.0.53
Siemens	N/A	Teamcenter Visualization V14.0 versions antérieures à V14.0.0.5
Siemens	N/A	SCALANCE XCM332 (6GK5332-0GA01-2AC2) versions antérieures à V2.2
Siemens	N/A	JT Open versions antérieures à V11.3.2.0
Siemens	N/A	Teamcenter Visualization V14.2 versions antérieures à V14.2.0.2
Siemens	N/A	Mendix Forgot Password (Mendix 7 compatible) versions antérieures à V3.7.1
Siemens	N/A	JT Utilities versions antérieures à V13.3.0.0
Siemens	N/A	Teamcenter Visualization V13.3 versions antérieures à V13.3.0.9
Siemens	N/A	OpenPCS 7 V9.1
Siemens	N/A	SIMATIC S7-300 CPU family versions antérieures à V3.X.18
Siemens	N/A	Teamcenter Visualization V14.1 versions antérieures à V14.1.0.7

References

Title

Publication Time

CNVD-2023-35759

Vulnerability from cnvd - Published: 2023-05-10

Title

多款Siemens产品拒绝服务漏洞（CNVD-2023-35759）

Description

Siemens SIMATIC IPC DiagMonitor是德国西门子（Siemens）公司的一套系统监控和故障诊断软件。SIMATIC CP 1242-7和CP 1243-7 LTE通信处理器将SIMATIC S7-1200控制器连接到广域网（WAN）。它们提供集成的安全功能，如防火墙、虚拟专用网络（VPN）以及对其他数据加密协议的支持。SIMATIC CP 1243-8 IRC通信处理器通过SINAUT ST7遥控协议将SIMATIC S7-1200控制器连接到控制中心或ST7主站。多款Siemens产品存在拒绝服务漏洞，攻击者可利用该漏洞导致受影响产品的Web服务器出现拒绝服务的情况。

Severity

高

Patch Name

多款Siemens产品拒绝服务漏洞（CNVD-2023-35759）的补丁

Patch Description

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf

Reference

https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf

Impacted products

Name
['Siemens SIMATIC IPC DiagMonitor', 'Siemens SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)', 'Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)', 'Siemens SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)', 'Siemens SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)', 'Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)', 'Siemens SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)', 'Siemens SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)', 'Siemens SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)', 'SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) <V3.3', 'SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) <V3.3', 'SIEMENS SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) <V3.3', 'SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) null', 'SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) null', 'SIEMENS SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) null', 'Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) null', 'Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) null', 'SIEMENS SIMATIC IPC DiagBase null', 'SIEMENS SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL(6AG2542-6VX00-4XE0) null', 'SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC(6AG1543-6WX00-7XE0) null', 'SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL(6AG2543-6WX00-4XE0) null', 'SIEMENS SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) <V3.3', 'SIEMENS SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) <V3.3l', 'Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) <V2.3.6', 'Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) <V2.3.6']

Name

['Siemens SIMATIC IPC DiagMonitor', 'Siemens SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)', 'Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)', 'Siemens SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)', 'Siemens SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)', 'Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)', 'Siemens SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)', 'Siemens SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)', 'Siemens SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)', 'SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) <V3.3', 'SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) <V3.3', 'SIEMENS SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) <V3.3', 'SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) null', 'SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) null', 'SIEMENS SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) null', 'Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) null', 'Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) null', 'SIEMENS SIMATIC IPC DiagBase null', 'SIEMENS SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL(6AG2542-6VX00-4XE0) null', 'SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC(6AG1543-6WX00-7XE0) null', 'SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL(6AG2543-6WX00-4XE0) null', 'SIEMENS SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) <V3.3', 'SIEMENS SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) <V3.3l', 'Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) <V2.3.6', 'Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) <V2.3.6']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-43768",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-43768"
    }
  },
  "description": "Siemens SIMATIC IPC DiagMonitor\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u5957\u7cfb\u7edf\u76d1\u63a7\u548c\u6545\u969c\u8bca\u65ad\u8f6f\u4ef6\u3002SIMATIC CP 1242-7\u548cCP 1243-7 LTE\u901a\u4fe1\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u4ee5\u53ca\u5bf9\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u7684\u652f\u6301\u3002SIMATIC CP 1243-8 IRC\u901a\u4fe1\u5904\u7406\u5668\u901a\u8fc7SINAUT ST7\u9065\u63a7\u534f\u8bae\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u63a7\u5236\u4e2d\u5fc3\u6216ST7\u4e3b\u7ad9\u3002\n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u53d7\u5f71\u54cd\u4ea7\u54c1\u7684Web\u670d\u52a1\u5668\u51fa\u73b0\u62d2\u7edd\u670d\u52a1\u7684\u60c5\u51b5\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-35759",
  "openTime": "2023-05-10",
  "patchDescription": "Siemens SIMATIC IPC DiagMonitor\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u5957\u7cfb\u7edf\u76d1\u63a7\u548c\u6545\u969c\u8bca\u65ad\u8f6f\u4ef6\u3002SIMATIC CP 1242-7\u548cCP 1243-7 LTE\u901a\u4fe1\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u4ee5\u53ca\u5bf9\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u7684\u652f\u6301\u3002SIMATIC CP 1243-8 IRC\u901a\u4fe1\u5904\u7406\u5668\u901a\u8fc7SINAUT ST7\u9065\u63a7\u534f\u8bae\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u63a7\u5236\u4e2d\u5fc3\u6216ST7\u4e3b\u7ad9\u3002\r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u53d7\u5f71\u54cd\u4ea7\u54c1\u7684Web\u670d\u52a1\u5668\u51fa\u73b0\u62d2\u7edd\u670d\u52a1\u7684\u60c5\u51b5\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2023-35759\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC IPC DiagMonitor",
      "Siemens SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)",
      "Siemens SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)",
      "Siemens SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)",
      "Siemens SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)",
      "Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)",
      "Siemens SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)",
      "Siemens SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)",
      "Siemens SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)",
      "SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) \u003cV3.3",
      "SIEMENS SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) \u003cV3.3",
      "SIEMENS SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) \u003cV3.3",
      "SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) null",
      "SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) null",
      "SIEMENS SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) null",
      "Siemens SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) null",
      "Siemens SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) null",
      "SIEMENS SIMATIC IPC DiagBase null",
      "SIEMENS SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL(6AG2542-6VX00-4XE0) null",
      "SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC(6AG1543-6WX00-7XE0) null",
      "SIEMENS SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL(6AG2543-6WX00-4XE0) null",
      "SIEMENS SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) \u003cV3.3",
      "SIEMENS SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) \u003cV3.3l",
      "Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) \u003cV2.3.6",
      "Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) \u003cV2.3.6"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2023-04-16",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2023-35759\uff09"
}

FKIE_CVE-2022-43768

Vulnerability from fkie_nvd - Published: 2023-04-11 10:15 - Updated: 2024-11-21 07:27

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

URL	Tags
productcert@siemens.com	https://cert-portal.siemens.com/productcert/html/ssa-139628.html
productcert@siemens.com	https://cert-portal.siemens.com/productcert/html/ssa-566905.html
productcert@siemens.com	https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/html/ssa-139628.html
af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/html/ssa-566905.html
af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf	Vendor Advisory

Impacted products

Vendor	Product	Version
siemens	simatic_cp_1242-7_v2_firmware	*
siemens	simatic_cp_1242-7_v2	-
siemens	simatic_cp_1243-1_firmware	*
siemens	simatic_cp_1243-1	-
siemens	simatic_cp_1243-1_dnp3_firmware	*
siemens	simatic_cp_1243-1_dnp3	-
siemens	simatic_cp_1243-1_iec_firmware	*
siemens	simatic_cp_1243-1_iec	-
siemens	simatic_cp_1243-7_lte_eu_firmware	*
siemens	simatic_cp_1243-7_lte_eu	-
siemens	simatic_cp_1243-7_lte_us_firmware	*
siemens	simatic_cp_1243-7_lte_us	-
siemens	simatic_cp_1243-8_irc_firmware	*
siemens	simatic_cp_1243-8_irc	-
siemens	simatic_cp_1542sp-1_firmware	*
siemens	simatic_cp_1542sp-1	-
siemens	simatic_cp_1542sp-1_irc_firmware	*
siemens	simatic_cp_1542sp-1_irc	-
siemens	simatic_cp_1543sp-1_firmware	*
siemens	simatic_cp_1543sp-1	-
siemens	simatic_cp_443-1_firmware	*
siemens	simatic_cp_443-1	-
siemens	simatic_cp_443-1_advanced_firmware	*
siemens	simatic_cp_443-1_advanced	-
siemens	simatic_ipc_diagbase_firmware	*
siemens	simatic_ipc_diagbase	-
siemens	simatic_ipc_diagmonitor_firmware	*
siemens	simatic_ipc_diagmonitor	-
siemens	siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware	*
siemens	siplus_et_200sp_cp_1542sp-1_irc_tx_rail	-
siemens	siplus_et_200sp_cp_1543sp-1_isec_firmware	*
siemens	siplus_et_200sp_cp_1543sp-1_isec	-
siemens	siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware	*
siemens	siplus_et_200sp_cp_1543sp-1_isec_tx_rail	-
siemens	siplus_net_cp_1242-7_v2_firmware	*
siemens	siplus_net_cp_1242-7_v2	-
siemens	siplus_net_cp_443-1_firmware	*
siemens	siplus_net_cp_443-1	-
siemens	siplus_net_cp_443-1_advanced_firmware	*
siemens	siplus_net_cp_443-1_advanced	-
siemens	siplus_s7-1200_cp_1243-1_firmware	*
siemens	siplus_s7-1200_cp_1243-1	-
siemens	siplus_s7-1200_cp_1243-1_rail_firmware	*
siemens	siplus_s7-1200_cp_1243-1_rail	-
siemens	siplus_tim_1531_irc_firmware	*
siemens	siplus_tim_1531_irc	-
siemens	tim_1531_irc_firmware	*
siemens	tim_1531_irc	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "840C5C25-1E34-42FA-8221-7232622C204F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "29D4C72C-4E84-4563-9D66-5C641AB996BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE3D7928-8E1A-400E-B790-58D6F5938E3C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA9BB25C-D5E3-43DE-8C73-06BDC43CA960",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCF9D803-FF47-4400-B2C4-1F4EE28E5AA8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FFBFB96-1A35-4724-831B-68E3A9C32921",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE5003DA-5488-47C1-B442-9137E849FDD5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFE96226-A2DF-4A9E-8CBB-8D7CF328E404",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "93D43BC6-EDE3-4EE1-9410-4717EB641AD0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "651C66E8-B3C0-4E88-BC7C-30BF16A7F7A3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "786F3FFD-87E4-45B9-A33C-BAE58379FF39",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF9224A6-8A35-4F4F-951F-5B24B89E5FC8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2AA6B43-7FC7-465A-9CD8-E8A4D6DBCD27",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "12A45F37-1E7D-4748-ADAC-EC4C454B693A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1F51B86-57EE-4DB6-B038-06726BC93D2D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C868560-8BAE-462D-AED0-3C52EA9B6DB8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8648EF79-043D-48DE-B9F8-BF762862EE99",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E362CEA5-F47B-4294-8F2D-A0A7AC6FF390",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C8B5C37-200C-4531-8876-3E05F3DE3EC8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "843A8686-5172-4782-BB97-B5D3C6FB27A3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCDA714C-5851-4E35-806F-E0C651A1E87A",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F58423D0-954E-426E-9F8F-3DD95FBDF50C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "418A9C80-BEFD-4A1F-B1BB-6C45A9267A44",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E478FE71-32D1-4FE4-8AC9-1C898EFFD0B3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "530FD06D-E020-4EB3-87DD-F7B2FEE58008",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8784BA58-12BF-4F1C-94D6-2D15933703C8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "91371CD0-EBDF-43C5-A262-A46E1C343716",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5E06833-4C26-40AC-B6CF-F7D1322462D6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE009635-7EC7-4A2F-B1FA-DD75213A25CA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF3E5DDA-1BD4-4511-A2C8-4B5D40E6755E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9054A7B6-9569-4D65-9695-A0FFA4F56C74",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A60FC550-A518-46BF-9124-E21DD654981C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F488C27-C8B9-4238-8409-AB7ACA3BC849",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "25634AD2-2CC0-45AF-B5DE-39D30CBA91A4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FE26E32-47C0-4976-A23A-07C1AE318C35",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "116E84DA-31F7-4AAC-A1AE-491C4C98BD49",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45B95689-C355-4CF1-AE7A-0860E4CEA11A",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "21F04D79-5815-4D36-8AA5-4866751D0DDB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "94CC55CF-9BA3-4BE7-9654-F6B6C4F0DA62",
              "versionEndExcluding": "3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2498071A-6540-4147-8D01-3B81A5CE9A57",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E700BF4C-64B1-455C-A6A6-3E4D71FB91B7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9E746CF-4009-4A14-8916-A9E0276CAF8B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B3C83EF-5D93-4F0B-80F9-997261F3DBA9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A294530-727C-4535-8B02-668DF74587D4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C616E50-1F96-4A87-8470-1BA8732FCB77",
              "versionEndExcluding": "2.3.6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "074FDC9C-CB36-4C67-82C8-1B930FF1269F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4646AF8C-B871-4F9E-85A4-ECE8F13AFB21",
              "versionEndExcluding": "2.3.6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1D94BEB-BBFB-4258-9835-87DBBB999239",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions \u003c V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions \u003c V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions \u003c V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product."
    }
  ],
  "id": "CVE-2022-43768",
  "lastModified": "2024-11-21T07:27:11.733",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "productcert@siemens.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2023-04-11T10:15:17.617",
  "references": [
    {
      "source": "productcert@siemens.com",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
    },
    {
      "source": "productcert@siemens.com",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
    },
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    }
  ]
}

GHSA-WXPJ-F564-69X8

Vulnerability from github – Published: 2023-04-11 12:30 – Updated: 2024-06-11 09:30

Details

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-43768"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-770"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-04-11T10:15:00Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (All versions \u003c V3.3), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions \u003c V2.3.6), TIM 1531 IRC (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
  "id": "GHSA-wxpj-f564-69x8",
  "modified": "2024-06-11T09:30:53Z",
  "published": "2023-04-11T12:30:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43768"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-43768

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 (All versions < V3.3), SIMATIC CP 443-1 Advanced (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions < V2.3.6), TIM 1531 IRC (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Aliases

CVE-2022-43768

Aliases

CVE-2022-43768

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-43768",
    "id": "GSD-2022-43768"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-43768"
      ],
      "details": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions \u003c V2.3.6), TIM 1531 IRC (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
      "id": "GSD-2022-43768",
      "modified": "2023-12-13T01:19:31.634611Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "productcert@siemens.com",
        "ID": "CVE-2022-43768",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "SIMATIC CP 1242-7 V2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-7 LTE EU",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-7 LTE US",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1243-8 IRC",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1542SP-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1542SP-1 IRC",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 1543SP-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 443-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V3.3"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIMATIC CP 443-1 Advanced",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS ET 200SP CP 1543SP-1 ISEC",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS NET CP 1242-7 V2",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS NET CP 443-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS NET CP 443-1 Advanced",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V3.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS S7-1200 CP 1243-1",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS S7-1200 CP 1243-1 RAIL",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "SIPLUS TIM 1531 IRC",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V2.3.6"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "TIM 1531 IRC",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "All versions \u003c V2.3.6"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Siemens"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions \u003c V2.3.6), TIM 1531 IRC (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-770",
                "lang": "eng",
                "value": "CWE-770: Allocation of Resources Without Limits or Throttling"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf",
            "refsource": "MISC",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.3.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.3.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-43768"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (All versions), SIMATIC CP 1243-7 LTE US (All versions), SIMATIC CP 1243-8 IRC (All versions), SIMATIC CP 1542SP-1 (All versions), SIMATIC CP 1542SP-1 IRC (All versions), SIMATIC CP 1543SP-1 (All versions), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC (All versions), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (All versions), SIPLUS NET CP 1242-7 V2 (All versions), SIPLUS NET CP 443-1 (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (All versions), SIPLUS TIM 1531 IRC (All versions \u003c V2.3.6), TIM 1531 IRC (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-770"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-05-09T13:15Z",
      "publishedDate": "2023-04-11T10:15Z"
    }
  }
}

ICSA-23-103-10

Vulnerability from csaf_cisa - Published: 2023-04-11 00:00 - Updated: 2025-05-06 06:00

Summary

Siemens Industrial Products

Notes

Summary: Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.

General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.

Legal Notice: All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.

Advisory Conversion Disclaimer: This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.

Critical infrastructure sectors: Multiple

Countries/areas deployed: Worldwide

Company headquarters location: Germany

Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

Recommended Practices: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.

Recommended Practices: Locate control system networks and remote devices behind firewalls and isolate them from business networks.

Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

CVE-2022-43716

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround

CVE-2022-43767

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-833 - Deadlock

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround

CVE-2022-43768

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	<V2.3.6	Mitigation Vendor Fix fix Workaround

References

10 references

URL	Category
https://cert-portal.siemens.com/productcert/csaf/…	self
https://cert-portal.siemens.com/productcert/html/…	self
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://us-cert.cisa.gov/sites/default/files/reco…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B	external

Acknowledgments

Siemens ProductCERT

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Siemens ProductCERT",
        "summary": "reporting these vulnerabilities to CISA."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "other",
        "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
        "title": "Advisory Conversion Disclaimer"
      },
      {
        "category": "other",
        "text": "Multiple",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-566905.json"
      },
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-23-103-10 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-103-10.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-23-103-10 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-10"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
      }
    ],
    "title": "Siemens Industrial Products",
    "tracking": {
      "current_release_date": "2025-05-06T06:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-23-103-10",
      "initial_release_date": "2023-04-11T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2023-04-11T00:00:00.000000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2023-05-09T00:00:00.000000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Removed SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor as they are not affected"
        },
        {
          "date": "2024-06-11T00:00:00.000000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fixes for SIMATIC CP 15xxSP-1 devices"
        },
        {
          "date": "2024-09-10T00:00:00.000000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fixes for SIMATIC S7-1200 CP 1200 family (incl. SIPLUS variants)"
        },
        {
          "date": "2025-05-06T06:00:00.000000Z",
          "legacy_version": "Revision",
          "number": "5",
          "summary": "Revision - Fixing typos"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)",
                  "product_id": "CSAFPID-0001",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)",
                  "product_id": "CSAFPID-0002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)",
                  "product_id": "CSAFPID-0003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1GX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)",
                  "product_id": "CSAFPID-0004",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7242-7KX31-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)",
                  "product_id": "CSAFPID-0005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-1BX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)",
                  "product_id": "CSAFPID-0008",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7KX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)",
                  "product_id": "CSAFPID-0009",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7SX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)",
                  "product_id": "CSAFPID-0010",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-8RX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)",
                  "product_id": "CSAFPID-0011",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6UX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)",
                  "product_id": "CSAFPID-0012",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6VX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)",
                  "product_id": "CSAFPID-0013",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-6WX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)",
                  "product_id": "CSAFPID-0014",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2542-6VX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)",
                  "product_id": "CSAFPID-0015",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-6WX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)",
                  "product_id": "CSAFPID-0016",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2543-6WX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)",
                  "product_id": "CSAFPID-0017",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1EX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)",
                  "product_id": "CSAFPID-0018",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1GX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)",
                  "product_id": "CSAFPID-0019",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1242-7KX31-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)",
                  "product_id": "CSAFPID-0020",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1243-1BX30-2AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)",
                  "product_id": "CSAFPID-0021",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2243-1BX30-1XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3.6",
                "product": {
                  "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)",
                  "product_id": "CSAFPID-0022",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-1MX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cV2.3.6",
                "product": {
                  "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)",
                  "product_id": "CSAFPID-0023",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-1MX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-43716",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0019",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "CSAFPID-0022",
            "CSAFPID-0023"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0017",
            "CSAFPID-0018"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "title": "CVE-2022-43716"
    },
    {
      "cve": "CVE-2022-43767",
      "cwe": {
        "id": "CWE-833",
        "name": "Deadlock"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0019",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "CSAFPID-0022",
            "CSAFPID-0023"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0017",
            "CSAFPID-0018"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "title": "CVE-2022-43767"
    },
    {
      "cve": "CVE-2022-43768",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011",
          "CSAFPID-0012",
          "CSAFPID-0013",
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0014",
          "CSAFPID-0015",
          "CSAFPID-0016",
          "CSAFPID-0019",
          "CSAFPID-0017",
          "CSAFPID-0018",
          "CSAFPID-0020",
          "CSAFPID-0021",
          "CSAFPID-0022",
          "CSAFPID-0023"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "CSAFPID-0022",
            "CSAFPID-0023"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0017",
            "CSAFPID-0018"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0019",
            "CSAFPID-0020",
            "CSAFPID-0021"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011",
            "CSAFPID-0012",
            "CSAFPID-0013",
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0014",
            "CSAFPID-0015",
            "CSAFPID-0016",
            "CSAFPID-0019",
            "CSAFPID-0017",
            "CSAFPID-0018",
            "CSAFPID-0020",
            "CSAFPID-0021",
            "CSAFPID-0022",
            "CSAFPID-0023"
          ]
        }
      ],
      "title": "CVE-2022-43768"
    }
  ]
}

SSA-566905

Vulnerability from csaf_siemens - Published: 2023-04-11 00:00 - Updated: 2024-09-10 00:00

Summary

SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Notes

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

CVE-2022-43716

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-416 - Use After Free

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround

CVE-2022-43767

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-833 - Deadlock

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround

CVE-2022-43768

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 23 products

Product	Identifier	Version	Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)	`6GK7242-7KX31-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)	`6GK7243-1BX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)		vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)	`6GK7243-7KX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)	`6GK7243-7SX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)	`6GK7243-8RX30-0XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)	`6GK7542-6UX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)	`6GK7542-6VX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)	`6GK7543-6WX00-0XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)	`6GK7443-1EX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)	`6GK7443-1EX30-0XE1`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)	`6GK7443-1GX30-0XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)	`6AG2542-6VX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)	`6AG1543-6WX00-7XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)	`6AG2543-6WX00-4XE0`	vers:all/<V2.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)	`6AG1242-7KX31-7XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)	`6AG1443-1EX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)	`6AG1443-1GX30-4XE0`	vers:all/<V3.3	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)	`6AG1243-1BX30-2AX0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)	`6AG2243-1BX30-1XE0`	vers:all/<V3.4.29	Mitigation Vendor Fix fix Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)	`6AG1543-1MX00-7XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0) Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)	`6GK7543-1MX00-0XE0`	vers:all/<V2.3.6	Mitigation Vendor Fix fix Workaround

References

2 references

URL	Category
https://cert-portal.siemens.com/productcert/html/…	self
https://cert-portal.siemens.com/productcert/csaf/…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
      },
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-566905.json"
      }
    ],
    "title": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products",
    "tracking": {
      "current_release_date": "2024-09-10T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-566905",
      "initial_release_date": "2023-04-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-04-11T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2023-05-09T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Removed SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor as they are not affected"
        },
        {
          "date": "2024-06-11T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fixes for SIMATIC CP 15xxSP-1 devices"
        },
        {
          "date": "2024-09-10T00:00:00Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fixes for SIMATIC S7-1200 CP 1200 family (incl. SIPLUS variants)"
        }
      ],
      "status": "interim",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)",
                  "product_id": "2",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)",
                  "product_id": "3",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1GX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)",
                  "product_id": "4",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7242-7KX31-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)",
                  "product_id": "5",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-1BX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)",
                  "product_id": "8",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7KX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)",
                  "product_id": "9",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7SX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)",
                  "product_id": "10",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-8RX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)",
                  "product_id": "11",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6UX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)",
                  "product_id": "12",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6VX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)",
                  "product_id": "13",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-6WX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)",
                  "product_id": "14",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2542-6VX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)",
                  "product_id": "15",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-6WX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)",
                  "product_id": "16",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2543-6WX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)",
                  "product_id": "17",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1EX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)",
                  "product_id": "18",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1GX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)",
                  "product_id": "19",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1242-7KX31-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)",
                  "product_id": "20",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1243-1BX30-2AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)",
                  "product_id": "21",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2243-1BX30-1XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3.6",
                "product": {
                  "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)",
                  "product_id": "22",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-1MX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3.6",
                "product": {
                  "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)",
                  "product_id": "23",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-1MX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-43716",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43716"
    },
    {
      "cve": "CVE-2022-43767",
      "cwe": {
        "id": "CWE-833",
        "name": "Deadlock"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43767"
    },
    {
      "cve": "CVE-2022-43768",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43768"
    }
  ]
}

VAR-202304-0701

Vulnerability from variot - Updated: 2024-06-12 20:23

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product. simatic cp 1242-7 v2 firmware, SIMATIC CP 1243-1 firmware, simatic cp 1243-1 dnp3 Multiple Siemens products, including firmware, contain vulnerabilities related to limited or unthrottled resource allocation.Service operation interruption (DoS) It may be in a state. Siemens SIMATIC IPC DiagMonitor is a set of system monitoring and fault diagnosis software from Siemens. The SIMATIC CP 1242-7 and CP 1243-7 LTE communications processors connect the SIMATIC S7-1200 controllers to the wide area network (WAN). They offer integrated security features such as firewalls, virtual private networks (VPNs), and support for other data encryption protocols. The SIMATIC CP 1243-8 IRC communication processor connects the SIMATIC S7-1200 controller to the control center or the ST7 master station via the SINAUT ST7 remote control protocol

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202304-0701",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "simatic cp",
        "scope": "eq",
        "trust": 1.2,
        "vendor": "siemens",
        "version": "443-1\u003cv3.3"
      },
      {
        "model": "simatic cp 1543sp-1",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1542sp-1 irc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus net cp 443-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.3"
      },
      {
        "model": "simatic cp 1243-1",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1243-7 lte us",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus et 200sp cp 1542sp-1 irc tx rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1243-7 lte eu",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1243-1 dnp3",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1242-7 v2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus tim 1531 irc",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.3.6"
      },
      {
        "model": "siplus s7-1200 cp 1243-1",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1542sp-1",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1200 cp 1243-1 rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus net cp 1242-7 v2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1243-8 irc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 1243-1 iec",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus net cp 443-1 advanced",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.3"
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec tx rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic ipc diagbase",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "tim 1531 irc",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "2.3.6"
      },
      {
        "model": "simatic ipc diagmonitor",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic cp 443-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.3"
      },
      {
        "model": "simatic cp 443-1 advanced",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.3"
      },
      {
        "model": "simatic cp 443-1 advanced",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic ipc diagmonitor",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-1 dnp3",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net cp 1242-7 v2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1542sp-1",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-8 irc",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-7 lte us",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net cp 443-1 advanced",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1543sp-1",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 443-1",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1242-7 v2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-1",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-1 iec",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus net cp 443-1",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1542sp-1 irc tx rail",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic ipc diagbase",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1542sp-1 irc",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec tx rail",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic cp 1243-7 lte eu",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic ipc diagmonitor",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "simatic cp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1242-7v2"
      },
      {
        "model": "simatic cp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-1"
      },
      {
        "model": "simatic cp lte eu",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-7"
      },
      {
        "model": "simatic cp lte us",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-7"
      },
      {
        "model": "simatic cp irc",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-8"
      },
      {
        "model": "siplus net cp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1242-7v2"
      },
      {
        "model": "siplus s7-1200 cp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-1"
      },
      {
        "model": "siplus s7-1200 cp rail",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-1"
      },
      {
        "model": "simatic cp advanced",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "443-1\u003cv3.3"
      },
      {
        "model": "simatic cp dnp3",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-1"
      },
      {
        "model": "simatic cp iec",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1243-1"
      },
      {
        "model": "simatic cp 1542sp-1",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "simatic cp 1542sp-1 irc",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "simatic cp 1543sp-1",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "simatic ipc diagbase",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1542sp-1 irc tx rail",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "siplus et 200sp cp 1543sp-1 isec tx rail",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "siplus net cp",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "443-1\u003cv3.3"
      },
      {
        "model": "siplus net cp advanced \u003cv3.3l",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "443-1"
      },
      {
        "model": "siplus tim irc",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1531\u003cv2.3.6"
      },
      {
        "model": "tim irc",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "siemens",
        "version": "1531\u003cv2.3.6"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "3.3",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.3.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.3.6",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "cve": "CVE-2022-43768",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2023-35759",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "productcert@siemens.com",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "OTHER",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "JVNDB-2022-022095",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "productcert@siemens.com",
            "id": "CVE-2022-43768",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "OTHER",
            "id": "JVNDB-2022-022095",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2023-35759",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202304-726",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions \u003c V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions \u003c V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions \u003c V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions \u003c V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003c V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003c V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions \u003c V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions \u003c V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product. simatic cp 1242-7 v2 firmware, SIMATIC CP 1243-1 firmware, simatic cp 1243-1 dnp3 Multiple Siemens products, including firmware, contain vulnerabilities related to limited or unthrottled resource allocation.Service operation interruption (DoS) It may be in a state. Siemens SIMATIC IPC DiagMonitor is a set of system monitoring and fault diagnosis software from Siemens. The SIMATIC CP 1242-7 and CP 1243-7 LTE communications processors connect the SIMATIC S7-1200 controllers to the wide area network (WAN). They offer integrated security features such as firewalls, virtual private networks (VPNs), and support for other data encryption protocols. The SIMATIC CP 1243-8 IRC communication processor connects the SIMATIC S7-1200 controller to the control center or the ST7 master station via the SINAUT ST7 remote control protocol",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-43768",
        "trust": 3.8
      },
      {
        "db": "SIEMENS",
        "id": "SSA-566905",
        "trust": 3.0
      },
      {
        "db": "SIEMENS",
        "id": "SSA-139628",
        "trust": 1.0
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-23-103-10",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU94715153",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2023.2159",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "id": "VAR-202304-0701",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      }
    ],
    "trust": 1.3485693792307694
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      }
    ]
  },
  "last_update_date": "2024-06-12T20:23:05.185000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Denial of Service Vulnerability in Several Siemens Products (CNVD-2023-35759)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/424651"
      },
      {
        "title": "Siemens SIMATIC CP443-1 OPC UA9 Security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=233079"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-770",
        "trust": 1.0
      },
      {
        "problemtype": "Allocation of resources without limits or throttling (CWE-770) [ others ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.0,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
      },
      {
        "trust": 1.0,
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
      },
      {
        "trust": 1.0,
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94715153/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-43768"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-10"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-43768/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2023.2159"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-05-10T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "date": "2023-11-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "date": "2023-04-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "date": "2023-04-11T10:15:17.617000",
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-05-10T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2023-35759"
      },
      {
        "date": "2023-11-15T06:20:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      },
      {
        "date": "2023-05-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      },
      {
        "date": "2024-06-11T09:15:12.230000",
        "db": "NVD",
        "id": "CVE-2022-43768"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Vulnerability in limiting or non-slotting resource allocation in multiple Siemens products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-022095"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-726"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-43768 (GCVE-0-2022-43768)

Solution

Solution

Tags

Sightings

Nomenclature