Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-35920

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (A

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens SIMATIC MV540 H

Default version status: unknown

  • All versions < V3.3.4affected

Siemens SIMATIC MV540 S

Default version status: unknown

  • All versions < V3.3.4affected

Siemens SIMATIC MV550 H

Default version status: unknown

  • All versions < V3.3.4affected

Siemens SIMATIC MV550 S

Default version status: unknown

  • All versions < V3.3.4affected

Siemens SIMATIC MV560 U

Default version status: unknown

  • All versions < V3.3.4affected

Siemens SIMATIC MV560 X

Default version status: unknown

  • All versions < V3.3.4affected

References