CVE-2023-37194

mediumPriorität · verfolgen · 0EPSS 0.002 · 9. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.19% (9th) EPSS

CVSS 6.7 · medium

Is it mine?

37 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-26

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationSIMATIC CP 1604 (6GK1160-4AA01)siemens_psirt
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1616 (6GK1161-6AA02)siemens_psirt
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1623 (6GK1162-3AA00)siemens_psirt
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1626 (6GK1162-6AA01)siemens_psirt
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1628 (6GK1162-8AA00)siemens_psirt
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1604 (6GK1160-4AA01)cisa_csaf_ot
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1616 (6GK1161-6AA02)cisa_csaf_ot
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1623 (6GK1162-3AA00)cisa_csaf_ot
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1626 (6GK1162-6AA01)cisa_csaf_ot
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
MitigationSIMATIC CP 1628 (6GK1162-8AA00)cisa_csaf_ot
Ensure that only trusted persons have access to the system and avoid the configuration of additional accounts with admin rights.
Kein Fix geplantSIMATIC CP 1604 (6GK1160-4AA01)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1616 (6GK1161-6AA02)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1623 (6GK1162-3AA00)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1626 (6GK1162-6AA01)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1628 (6GK1162-8AA00)siemens_psirt
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1604 (6GK1160-4AA01)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1616 (6GK1161-6AA02)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1623 (6GK1162-3AA00)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1626 (6GK1162-6AA01)cisa_csaf_ot
Currently no fix is planned
Kein Fix geplantSIMATIC CP 1628 (6GK1162-8AA00)cisa_csaf_ot
Currently no fix is planned

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.7

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.16.7mediumAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · ENISA EU

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 0.8 · Auswirkung 5.9

v3.16.7mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-284USCWE-284USCWE-284USCWE-284US

betroffene Produkte (37)

Betroffene Produkte und Versionsbereiche.

Siemens SICAM A8000alle Versionencert_bundDEcpe:/h:siemens:sicam:a8000
Siemens SICAM CPalle Versionencert_bundDEcpe:/h:siemens:sicam:cp
Siemens SICAM HMI Comfort Outdoor Panelsalle Versionencert_bundDEcpe:/h:siemens:sicam:hmi_comfort_outdoor_panels
Siemens SICAM HMI KTP Mobile Panelsalle Versionencert_bundDEcpe:/h:siemens:sicam:hmi_ktp_mobile_panels
Siemens SICAM NET PC Softwarealle Versionencert_bundDEcpe:/h:siemens:sicam:net_pc_software
Siemens SICAM PASalle Versionencert_bundDEcpe:/h:siemens:sicam:pas
Siemens SICAM PQSalle Versionencert_bundDEcpe:/h:siemens:sicam:pqs
SIMATIC CP 1604 (6GK1160-4AA01)alle Versionencisa_csaf_otUS
SIMATIC CP 1616 (6GK1161-6AA02)alle Versionencisa_csaf_otUS
SIMATIC CP 1623 (6GK1162-3AA00)alle Versionencisa_csaf_otUS
SIMATIC CP 1626 (6GK1162-6AA01)alle Versionencisa_csaf_otUS
SIMATIC CP 1628 (6GK1162-8AA00)alle Versionencisa_csaf_otUS
Siemens SIMATIC CP 1604 (6GK1160-4AA01)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC CP 1616 (6GK1161-6AA02)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC CP 1623 (6GK1162-3AA00)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC CP 1626 (6GK1162-6AA01)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC CP 1628 (6GK1162-8AA00)≤ vers:all/*cisa_csaf_otUS
Siemens SIMATIC CP 1604≤ All versionsenisa_euvdEU
Siemens SIMATIC CP 1616≤ All versionsenisa_euvdEU
Siemens SIMATIC CP 1623≤ All versionsenisa_euvdEU

20 von 37 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-784849SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices2023-10-10csaf · siemens_psirtDE
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
WID-SEC-W-2023-2603Siemens SICAM: Mehrere SchwachstellenDeutsch2023-10-09csaf · cert_bundDE
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.
ICSA-23-285-01Siemens SIMATIC CP products2023-10-10icsa · cisa_csaf_otUS
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2023-10-10geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan