6.7
Medium
CVE-2023-37194 A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623…
Description
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SIMATIC CP 1604 | Versions not published | |
| SIMATIC CP 1616 | Versions not published | |
| SIMATIC CP 1623 | Versions not published | |
| SIMATIC CP 1626 | Versions not published | |
| SIMATIC CP 1628 | Versions not published | |
| simatic_cp_1604_firmware | Versions not published | |
| simatic_cp_1616_firmware | Versions not published | |
| simatic_cp_1623_firmware | Versions not published | |
| simatic_cp_1626_firmware | Versions not published |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| simatic_cp_1628_firmware | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of SIMATIC CP 1604
The 7 CVEs of SIMATIC CP 1604 →
CVE-2023-37195
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623…
4.4
Medium
CVE-2020-28400
Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial of service…
7.5
High
CVE-2019-10923
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time…
7.5
High
CVE-2019-6568
The webserver of the affected devices contains a vulnerability that may lead to
a denial of service condition
7.5
High