Yüksek CVSS 7.5
CVE-2023-35920: Simatic Mv540 H Firmware: denetimsiz kaynak tüketimi
Açıklama (NVD)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.
Özet bilgiler
- Ürün
- Siemens Simatic Mv540 H Firmware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,87 (yüzdelik 59)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-simatic-mv540-h-firmware | — | — | 3.3.4 |
| siemens-simatic-mv540-s-firmware | — | — | 3.3.4 |
| siemens-simatic-mv550-h-firmware | — | — | 3.3.4 |
| siemens-simatic-mv550-s-firmware | — | — | 3.3.4 |
| siemens-simatic-mv560-u-firmware | — | — | 3.3.4 |
| siemens-simatic-mv560-x-firmware | — | — | 3.3.4 |