Siemens SIMATIC MV500
view advisory published 2023-11-14
SIMATIC MV500 before V3.3.5 is affected by multiple vulnerabilities. Siemens has released an update for SIMATIC MV500 and recommends to update to the latest version.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3817US | medium5.3 | — | ||
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_ch… | ||||
| CVE-2023-3446US | medium5.3 | — | ||
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_ch… | ||||
| CVE-2023-2975US | medium5.3 | — | ||
Issue summary: The AES-SIV cipher implementation contains a bug that causes
it to ignore empty associated data entries which are unauthenticated as
a consequence.
Impact summary:… | ||||
| CVE-2023-35788US | high7.8 | Exploit | ||
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOW… | ||||
| CVE-2022-44793US | medium6.5 | — | ||
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the in… | ||||
| CVE-2022-44792US | medium6.5 | — | ||
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access… | ||||
| CVE-2022-23219US | critical9.8 | — | ||
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating it… | ||||
| CVE-2022-23218US | critical9.8 | — | ||
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 - CSAF Versionself
- SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 - HTML Versionself
- SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 - PDF Versionself
- SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5 - TXT Versionself
- ICS Advisory ICSA-23-320-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-320-13 - Web Versionself
- Recommended Practicesexternal
03
remediations (8)
- FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/ - FixedSIMATIC MV500 family
Update to V3.3.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109825816/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan