CVE-2022-43767

highPriorität · verfolgen · 0EPSS 0.007 · 54. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.72% (54th) EPSS

CVSS 7.5 · high

Is it mine?

137 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)siemens_psirt
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)siemens_psirt
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)siemens_psirt
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/
BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)siemens_psirt
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/
BehobenSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954475/
BehobenSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)cisa_csaf_ot
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817938/
BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)cisa_csaf_ot
Update to V3.4.29 or later version
https://support.industry.siemens.com/cs/ww/en/view/109823721/
BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)cisa_csaf_ot
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/
BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)cisa_csaf_ot
Update to V2.3.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817397/
MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
WorkaroundSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundTIM 1531 IRC (6GK7543-1MX00-0XE0)siemens_psirt
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-1 IEC (incl. SIPLUS variants)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 (6GK7443-1EX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 (6GK7443-1EX30-0XE1)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product
WorkaroundTIM 1531 IRC (6GK7543-1MX00-0XE0)cisa_csaf_ot
Restrict access to the web interface of the affected products, if deactivation is not supported by the product

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-833USCWE-833USCWE-833USCWE-833US

betroffene Produkte (137)

Betroffene Produkte und Versionsbereiche.

SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 443-1 (6GK7443-1EX30-0XE0)alle Versionencisa_csaf_otUS
SIMATIC CP 443-1 (6GK7443-1EX30-0XE1)alle Versionencisa_csaf_otUS
SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0)alle Versionencisa_csaf_otUS
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)alle Versionencisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)alle Versionencisa_csaf_otUS
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)alle Versionencisa_csaf_otUS
SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)alle Versionencisa_csaf_otUS
SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0)alle Versionencisa_csaf_otUS
SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0)alle Versionencisa_csaf_otUS
SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)alle Versionencisa_csaf_otUS

20 von 137 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-566905SSA-566905: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products2023-04-11csaf · siemens_psirtDE
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-23-103-10Siemens Industrial Products2023-04-11icsa · cisa_csaf_otUS
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2023-04-11geändert 2026-10-23

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan