7.5
High
CVE-2023-35920 A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
Description
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC MV540 H | Versions not published | |
| SIMATIC MV540 S | Versions not published | |
| SIMATIC MV550 H | Versions not published | |
| SIMATIC MV550 S | Versions not published | |
| SIMATIC MV560 U | Versions not published | |
| SIMATIC MV560 X | Versions not published | |
| simatic_mv540_h 3.3 | earliest → < 3.3.4 | 3.3.4 |
| simatic_mv540_s 3.3 | earliest → < 3.3.4 | 3.3.4 |
| simatic_mv550_h 3.3 | earliest → < 3.3.4 | 3.3.4 |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| simatic_mv550_s 3.3 | earliest → < 3.3.4 | 3.3.4 |
| simatic_mv560_u 3.3 | earliest → < 3.3.4 | 3.3.4 |
| simatic_mv560_x 3.3 | earliest → < 3.3.4 | 3.3.4 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC MV540 H
The 8 CVEs of SIMATIC MV540 H →
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated
CVE-2023-36521
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
8.6
High
CVE-2023-35921
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4),…
7.5
High
CVE-2022-33138
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3),…
Not rated