SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices
view advisory published 2024-11-12
SIMATIC CP 1543-1 devices contain an Incorrect Authorization vulnerability that could allow an unauthenticated attacker to gain access to the filesystem. Siemens has released a new version for SIMATIC CP 1543-1 V4.0 and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-50310US | —OT elevated | — | ||
A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationSIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0)
Restrict access to port 8448/tcp to trusted systems only
- FixedSIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0)
Update to V4.0.50 or later version
https://support.industry.siemens.com/cs/ww/en/view/109976120/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan