A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All versions), SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0) (All versions), SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0) (All versions). Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-516818.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
18 Oct 2024, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Siemens siplus Net Cp 343-1 Firmware
Siemens cp 343-1 Lean Firmware Siemens cp 343-1 Lean Siemens siplus Net Cp 343-1 Lean Firmware Siemens siplus Net Cp 343-1 Siemens cp 343-1 Firmware Siemens Siemens siplus Net Cp 343-1 Lean Siemens cp 343-1 |
|
| References | () https://cert-portal.siemens.com/productcert/html/ssa-516818.html - Vendor Advisory | |
| CPE | cpe:2.3:h:siemens:siplus_net_cp_343-1:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:siplus_net_cp_343-1_lean:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:cp_343-1_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:siemens:siplus_net_cp_343-1_lean_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:siplus_net_cp_343-1_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp_343-1_lean:-:*:*:*:*:*:*:* cpe:2.3:o:siemens:cp_343-1_lean_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:siemens:cp_343-1:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo |
13 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-13 09:15
Updated : 2024-10-18 17:19
NVD link : CVE-2023-51440
Mitre link : CVE-2023-51440
CVE.ORG link : CVE-2023-51440
JSON object : View
Products Affected
siemens
- siplus_net_cp_343-1
- cp_343-1_lean
- cp_343-1_lean_firmware
- siplus_net_cp_343-1_lean
- siplus_net_cp_343-1_firmware
- cp_343-1_firmware
- cp_343-1
- siplus_net_cp_343-1_lean_firmware
CWE