Yüksek CVSS 7.5
CVE-2023-36521: Simatic Mv540 H Firmware: güvenlik açığı
Açıklama (NVD)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all socket-based communication of the affected products if the result server is enabled.
Özet bilgiler
- Ürün
- Siemens Simatic Mv540 H Firmware
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,63 (yüzdelik 50)
- CWE
- CWE-770
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| siemens-simatic-mv540-h-firmware | — | — | 3.3.4 |
| siemens-simatic-mv540-s-firmware | — | — | 3.3.4 |
| siemens-simatic-mv550-h-firmware | — | — | 3.3.4 |
| siemens-simatic-mv550-s-firmware | — | — | 3.3.4 |
| siemens-simatic-mv560-u-firmware | — | — | 3.3.4 |
| siemens-simatic-mv560-x-firmware | — | — | 3.3.4 |