4.4
Medium
CVE-2023-37195 A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623…
Description
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). Affected devices insufficiently control continuous mapping of direct memory access (DMA) requests. This could allow local attackers with administrative privileges to cause a denial of service situation on the host. A physical power cycle is required to get the system working again.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC CP 1604 | Versions not published | |
| SIMATIC CP 1616 | Versions not published | |
| SIMATIC CP 1623 | Versions not published | |
| SIMATIC CP 1626 | Versions not published | |
| SIMATIC CP 1628 | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC CP 1604
The 7 CVEs of SIMATIC CP 1604 →
CVE-2023-37194
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623…
6.7
Medium
CVE-2020-28400
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service…
7.5
High
CVE-2019-10923
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time…
7.5
High
CVE-2019-6568
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition
7.5
High