7.5
Élevée
CVE-2023-46156 Affected devices improperly handle specially crafted packets sent to port 102/tcp
Description
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC Drive Controller CPU 1504D TF 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC Drive Controller CPU 1507D TF 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) 30.1 | premières → < 30.1.0 | 30.1.0 |
| SIMATIC S7-1500 CPU 1510SP F-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC S7-1500 CPU 1510SP-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC S7-1500 CPU 1511-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC S7-1500 CPU 1511C-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC S7-1500 CPU 1511F-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
| SIMATIC S7-1500 CPU 1511T-1 PN 3.1 | premières → < 3.1.0 | 3.1.0 |
Afficher les 71 autres branches Masquer les 71 autres branches
Références
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC Drive Controller CPU 1504D TF
Les 24 CVE de SIMATIC Drive Controller CPU 1504D TF →
CVE-2026-63357
Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before…
6.1
Moyenne
CVE-2026-63356
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including…
6.1
Moyenne
CVE-2026-63355
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in…
6.1
Moyenne
CVE-2026-63354
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…
9.6
Critique