SSA-566905

Vulnerability from csaf_siemens - Published: 2023-04-11 00:00 - Updated: 2024-09-10 00:00
Summary
SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products
Notes
Summary: Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
CVE-2022-43716
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE-416 - Use After Free
Affected products
Product Identifier Version Remediation
SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Siemens / SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
 6GK7242-7KX31-0XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Siemens / SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
 6GK7243-1BX30-0XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
Siemens / SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)
 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
Siemens / SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)
 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Siemens / SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
 6GK7243-7KX30-0XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Siemens / SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
 6GK7243-7SX30-0XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Siemens / SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
 6GK7243-8RX30-0XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Siemens / SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
 6GK7542-6UX00-0XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Siemens / SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
 6GK7542-6VX00-0XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Siemens / SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
 6GK7543-6WX00-0XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)
 6GK7443-1EX30-0XE0 vers:all/<V3.3
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
Siemens / SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)
 6GK7443-1EX30-0XE1 vers:all/<V3.3
Mitigation
Vendor Fix fix
Workaround
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
Siemens / SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)
 6GK7443-1GX30-0XE0 vers:all/<V3.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Siemens / SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
 6AG2542-6VX00-4XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
 6AG1543-6WX00-7XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Siemens / SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
 6AG2543-6WX00-4XE0 vers:all/<V2.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Siemens / SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
 6AG1242-7KX31-7XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
Siemens / SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)
 6AG1443-1EX30-4XE0 vers:all/<V3.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
Siemens / SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)
 6AG1443-1GX30-4XE0 vers:all/<V3.3
Mitigation
Vendor Fix fix
Workaround
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Siemens / SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
 6AG1243-1BX30-2AX0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Siemens / SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
 6AG2243-1BX30-1XE0 vers:all/<V3.4.29
Mitigation
Vendor Fix fix
Workaround
SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Siemens / SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
 6AG1543-1MX00-7XE0 vers:all/<V2.3.6
Mitigation
Vendor Fix fix
Workaround
TIM 1531 IRC (6GK7543-1MX00-0XE0)
Siemens / TIM 1531 IRC (6GK7543-1MX00-0XE0)
 6GK7543-1MX00-0XE0 vers:all/<V2.3.6
Mitigation
Vendor Fix fix
Workaround
CVE-2022-43767
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE-833 - Deadlock
Affected products
Known affected 23 products, the same list as for CVE-2022-43716
CVE-2022-43768
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Known affected 23 products, the same list as for CVE-2022-43716
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
      },
      {
        "category": "self",
        "summary": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-566905.json"
      }
    ],
    "title": "SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products",
    "tracking": {
      "current_release_date": "2024-09-10T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-566905",
      "initial_release_date": "2023-04-11T00:00:00Z",
      "revision_history": [
        {
          "date": "2023-04-11T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2023-05-09T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Removed SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor as they are not affected"
        },
        {
          "date": "2024-06-11T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fixes for SIMATIC CP 15xxSP-1 devices"
        },
        {
          "date": "2024-09-10T00:00:00Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fixes for SIMATIC S7-1200 CP 1200 family (incl. SIPLUS variants)"
        }
      ],
      "status": "interim",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)",
                  "product_id": "1",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)",
                  "product_id": "2",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1EX30-0XE1"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)",
                  "product_id": "3",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7443-1GX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)",
                  "product_id": "4",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7242-7KX31-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)",
                  "product_id": "5",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-1BX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)",
                  "product_id": "8",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7KX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)",
                  "product_id": "9",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-7SX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)",
                  "product_id": "10",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7243-8RX30-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)",
                  "product_id": "11",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6UX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)",
                  "product_id": "12",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7542-6VX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)",
                  "product_id": "13",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-6WX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)",
                  "product_id": "14",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2542-6VX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)",
                  "product_id": "15",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-6WX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3",
                "product": {
                  "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)",
                  "product_id": "16",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2543-6WX00-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)",
                  "product_id": "17",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1EX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.3",
                "product": {
                  "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)",
                  "product_id": "18",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1443-1GX30-4XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)",
                  "product_id": "19",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1242-7KX31-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)",
                  "product_id": "20",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1243-1BX30-2AX0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV3.4.29",
                "product": {
                  "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)",
                  "product_id": "21",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG2243-1BX30-1XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3.6",
                "product": {
                  "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)",
                  "product_id": "22",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6AG1543-1MX00-7XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/\u003cV2.3.6",
                "product": {
                  "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)",
                  "product_id": "23",
                  "product_identification_helper": {
                    "model_numbers": [
                      "6GK7543-1MX00-0XE0"
                    ]
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-43716",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43716"
    },
    {
      "cve": "CVE-2022-43767",
      "cwe": {
        "id": "CWE-833",
        "name": "Deadlock"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43767"
    },
    {
      "cve": "CVE-2022-43768",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "12",
          "13",
          "1",
          "2",
          "3",
          "14",
          "15",
          "16",
          "19",
          "17",
          "18",
          "20",
          "21",
          "22",
          "23"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Deactivate the webserver if not required, and if deactivation is supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3 or later version",
          "product_ids": [
            "11",
            "12",
            "13",
            "14",
            "15",
            "16"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109954475/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2.3.6 or later version",
          "product_ids": [
            "22",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817397/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.3 or later version",
          "product_ids": [
            "1",
            "2",
            "3",
            "17",
            "18"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109817938/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V3.4.29 or later version",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "19",
            "20",
            "21"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109823721/"
        },
        {
          "category": "workaround",
          "details": "Restrict access to the web interface of the affected products, if deactivation is not supported by the product",
          "product_ids": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "12",
            "13",
            "1",
            "2",
            "3",
            "14",
            "15",
            "16",
            "19",
            "17",
            "18",
            "20",
            "21",
            "22",
            "23"
          ]
        }
      ],
      "title": "CVE-2022-43768"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.