Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-28827 (GCVE-0-2023-28827)
Vulnerability from cvelistv5
- CWE-476 - NULL Pointer Dereference
Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Siemens | SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) |
Version: 0 < V3.5.20 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2023-28827", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-09-10T15:10:54.020229Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-09-10T15:11:03.085Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "defaultStatus": "unknown", "product": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC CP 1243-1 (incl. SIPLUS variants)", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC CP 1243-7 LTE", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC CP 1243-8 IRC", "vendor": "Siemens", "versions": [ { "lessThan": "V3.5.20", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC IPC DiagBase", "vendor": "Siemens", "versions": [ { "lessThan": "*", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC IPC DiagMonitor", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions" } ] }, { "defaultStatus": "unknown", "product": "SIMATIC WinCC Runtime Advanced", "vendor": "Siemens", "versions": [ { "status": "affected", "version": "All versions" } ] }, { "defaultStatus": "unknown", "product": "SIPLUS TIM 1531 IRC", "vendor": "Siemens", "versions": [ { "lessThan": "V2.4.8", "status": "affected", "version": "0", "versionType": "custom" } ] }, { "defaultStatus": "unknown", "product": "TIM 1531 IRC", "vendor": "Siemens", "versions": [ { "lessThan": "V2.4.8", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system." } ], "metrics": [ { "cvssV3_1": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" } }, { "cvssV4_0": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-476", "description": "CWE-476: NULL Pointer Dereference", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-09-10T09:33:37.794Z", "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "shortName": "siemens" }, "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ] } }, "cveMetadata": { "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77", "assignerShortName": "siemens", "cveId": "CVE-2023-28827", "datePublished": "2024-09-10T09:33:37.794Z", "dateReserved": "2023-03-24T15:17:29.557Z", "dateUpdated": "2024-09-10T15:11:03.085Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-28827\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2024-09-10T10:15:05.347\",\"lastModified\":\"2024-09-10T12:09:50.377\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \\r\\n\\r\\nThis could allow a remote attacker to cause a denial of service condition in the system.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en SIMATIC CP 1242-7 V2 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 IEC (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-7 LTE (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (Todas las versiones \u0026lt; V3.5.20), SIMATIC HMI Comfort Panels (incl. variantes SIPLUS) (Todas las versiones), SIMATIC IPC DiagBase (Todas las versiones), SIMATIC IPC DiagMonitor (todas las versiones), SIMATIC WinCC Runtime Advanced (todas las versiones), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (todas las versiones \u0026lt; V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (todas las versiones \u0026lt; V2.4.8). El servidor web de los dispositivos afectados no procesa correctamente ciertas solicitudes, lo que provoca un tiempo de espera en el watchdog, lo que podr\u00eda provocar la limpieza de punteros. Esto podr\u00eda permitir que un atacante remoto provoque una condici\u00f3n de denegaci\u00f3n de servicio en el sistema.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnerableSystemConfidentiality\":\"NONE\",\"vulnerableSystemIntegrity\":\"NONE\",\"vulnerableSystemAvailability\":\"HIGH\",\"subsequentSystemConfidentiality\":\"NONE\",\"subsequentSystemIntegrity\":\"NONE\",\"subsequentSystemAvailability\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirements\":\"NOT_DEFINED\",\"integrityRequirements\":\"NOT_DEFINED\",\"availabilityRequirements\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnerableSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedVulnerableSystemIntegrity\":\"NOT_DEFINED\",\"modifiedVulnerableSystemAvailability\":\"NOT_DEFINED\",\"modifiedSubsequentSystemConfidentiality\":\"NOT_DEFINED\",\"modifiedSubsequentSystemIntegrity\":\"NOT_DEFINED\",\"modifiedSubsequentSystemAvailability\":\"NOT_DEFINED\",\"safety\":\"NOT_DEFINED\",\"automatable\":\"NOT_DEFINED\",\"recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-423808.html\",\"source\":\"productcert@siemens.com\"}]}}", "vulnrichment": { "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-28827\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:10:54.020229Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-10T15:10:58.682Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C\"}}, {\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 8.2, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N\"}}], \"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1 (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-7 LTE\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC CP 1243-8 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V3.5.20\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC HMI Comfort Panels (incl. SIPLUS variants)\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC IPC DiagBase\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC IPC DiagMonitor\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC WinCC Runtime Advanced\", \"versions\": [{\"status\": \"affected\", \"version\": \"All versions\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS TIM 1531 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.4.8\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"TIM 1531 IRC\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V2.4.8\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-423808.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \\r\\n\\r\\nThis could allow a remote attacker to cause a denial of service condition in the system.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-476\", \"description\": \"CWE-476: NULL Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"shortName\": \"siemens\", \"dateUpdated\": \"2024-09-10T09:33:37.794Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2023-28827\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-09-10T15:11:03.085Z\", \"dateReserved\": \"2023-03-24T15:17:29.557Z\", \"assignerOrgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"datePublished\": \"2024-09-10T09:33:37.794Z\", \"assignerShortName\": \"siemens\"}", "dataType": "CVE_RECORD", "dataVersion": "5.1" } } }
SSA-423808
Vulnerability from csaf_siemens
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)", "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "productcert@siemens.com", "name": "Siemens ProductCERT", "namespace": "https://www.siemens.com" }, "references": [ { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" }, { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-423808.json" } ], "title": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products", "tracking": { "current_release_date": "2024-09-10T00:00:00Z", "generator": { "engine": { "name": "Siemens ProductCERT CSAF Generator", "version": "1" } }, "id": "SSA-423808", "initial_release_date": "2024-09-10T00:00:00Z", "revision_history": [ { "date": "2024-09-10T00:00:00Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" } ], "status": "interim", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", "product_id": "1" } } ], "category": "product_name", "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)", "product_id": "2" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", "product_id": "3" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", "product_id": "4" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-7 LTE", "product_id": "5" } } ], "category": "product_name", "name": "SIMATIC CP 1243-7 LTE" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)", "product_id": "6", "product_identification_helper": { "model_numbers": [ "6GK7243-8RX30-0XE0" ] } } } ], "category": "product_name", "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", "product_id": "7" } } ], "category": "product_name", "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagBase", "product_id": "8" } } ], "category": "product_name", "name": "SIMATIC IPC DiagBase" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagMonitor", "product_id": "9" } } ], "category": "product_name", "name": "SIMATIC IPC DiagMonitor" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC WinCC Runtime Advanced", "product_id": "10" } } ], "category": "product_name", "name": "SIMATIC WinCC Runtime Advanced" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2.4.8", "product": { "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)", "product_id": "11", "product_identification_helper": { "model_numbers": [ "6AG1543-1MX00-7XE0" ] } } } ], "category": "product_name", "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2.4.8", "product": { "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)", "product_id": "12", "product_identification_helper": { "model_numbers": [ "6GK7543-1MX00-0XE0" ] } } } ], "category": "product_name", "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. \r\n\r\nThis could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference.\r\n\r\nThis could allow a remote attacker with no privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-30756" } ] }
ssa-423808
Vulnerability from csaf_siemens
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)", "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "productcert@siemens.com", "name": "Siemens ProductCERT", "namespace": "https://www.siemens.com" }, "references": [ { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" }, { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-423808.json" } ], "title": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products", "tracking": { "current_release_date": "2024-09-10T00:00:00Z", "generator": { "engine": { "name": "Siemens ProductCERT CSAF Generator", "version": "1" } }, "id": "SSA-423808", "initial_release_date": "2024-09-10T00:00:00Z", "revision_history": [ { "date": "2024-09-10T00:00:00Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" } ], "status": "interim", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", "product_id": "1" } } ], "category": "product_name", "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)", "product_id": "2" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", "product_id": "3" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", "product_id": "4" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-7 LTE", "product_id": "5" } } ], "category": "product_name", "name": "SIMATIC CP 1243-7 LTE" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)", "product_id": "6", "product_identification_helper": { "model_numbers": [ "6GK7243-8RX30-0XE0" ] } } } ], "category": "product_name", "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", "product_id": "7" } } ], "category": "product_name", "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagBase", "product_id": "8" } } ], "category": "product_name", "name": "SIMATIC IPC DiagBase" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagMonitor", "product_id": "9" } } ], "category": "product_name", "name": "SIMATIC IPC DiagMonitor" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC WinCC Runtime Advanced", "product_id": "10" } } ], "category": "product_name", "name": "SIMATIC WinCC Runtime Advanced" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2.4.8", "product": { "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)", "product_id": "11", "product_identification_helper": { "model_numbers": [ "6AG1543-1MX00-7XE0" ] } } } ], "category": "product_name", "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/\u003cV2.4.8", "product": { "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)", "product_id": "12", "product_identification_helper": { "model_numbers": [ "6GK7543-1MX00-0XE0" ] } } } ], "category": "product_name", "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. \r\n\r\nThis could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference.\r\n\r\nThis could allow a remote attacker with no privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "7", "8", "9", "10" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "11", "12" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "1", "2", "3", "4", "5", "6" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12" ] } ], "title": "CVE-2023-30756" } ] }
ncsc-2024-0362
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", "title": "Interpretaties" }, { "category": "description", "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Misinterpretation of Input", "title": "CWE-115" }, { "category": "general", "text": "Hidden Functionality", "title": "CWE-912" }, { "category": "general", "text": "Signal Handler Race Condition", "title": "CWE-364" }, { "category": "general", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" }, { "category": "general", "text": "Improper Validation of Certificate with Host Mismatch", "title": "CWE-297" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" }, { "category": "general", "text": "Cleartext Transmission of Sensitive Information", "title": "CWE-319" }, { "category": "general", "text": "Insufficient Session Expiration", "title": "CWE-613" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" }, { "category": "general", "text": "Observable Response Discrepancy", "title": "CWE-204" }, { "category": "general", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" }, { "category": "general", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "general", "text": "Session Fixation", "title": "CWE-384" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-039007.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-097435.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-097786.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-103653.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-342438.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-359713.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-417159.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-423808.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-427715.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-446545.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-629254.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-673996.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-765405.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-773256.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-869574.pdf" } ], "title": "Kwetsbaarheden verholpen in Siemens producten", "tracking": { "current_release_date": "2024-09-10T18:20:41.668720Z", "id": "NCSC-2024-0362", "initial_release_date": "2024-09-10T18:20:41.668720Z", "revision_history": [ { "date": "2024-09-10T18:20:41.668720Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "ai_model_deployer", "product": { "name": "ai_model_deployer", "product_id": "CSAFPID-1637884", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:ai_model_deployer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v5", "product": { "name": "automation_license_manager_v5", "product_id": "CSAFPID-1637629", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v5", "product": { "name": "automation_license_manager_v5", "product_id": "CSAFPID-1553852", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.0", "product": { "name": "automation_license_manager_v6.0", "product_id": "CSAFPID-1637630", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.0", "product": { "name": "automation_license_manager_v6.0", "product_id": "CSAFPID-1637609", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.2", "product": { "name": "automation_license_manager_v6.2", "product_id": "CSAFPID-1637631", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.2", "product": { "name": "automation_license_manager_v6.2", "product_id": "CSAFPID-1637610", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.2:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_", "product": { "name": "data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_", "product_id": "CSAFPID-1637885", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "eti5_ethernet_int._1x100tx_iec61850", "product": { "name": "eti5_ethernet_int._1x100tx_iec61850", "product_id": "CSAFPID-1637840", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:eti5_ethernet_int._1x100tx_iec61850:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_os__iem-os_", "product": { "name": "industrial_edge_management_os__iem-os_", "product_id": "CSAFPID-1637818", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_os__iem-os_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_pro", "product": { "name": "industrial_edge_management_pro", "product_id": "CSAFPID-1637809", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_pro:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_pro", "product": { "name": "industrial_edge_management_pro", "product_id": "CSAFPID-1637611", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_pro:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_virtual", "product": { "name": "industrial_edge_management_virtual", "product_id": "CSAFPID-1637810", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_virtual:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_virtual", "product": { "name": "industrial_edge_management_virtual", "product_id": "CSAFPID-1637612", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_virtual:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "livetwin_industrial_edge_app__6av2170-0bl00-0aa0_", "product": { "name": "livetwin_industrial_edge_app__6av2170-0bl00-0aa0_", "product_id": "CSAFPID-1637886", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:livetwin_industrial_edge_app__6av2170-0bl00-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.12", "product": { "name": "mendix_runtime_v10.12", "product_id": "CSAFPID-1637623", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.12:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.12", "product": { "name": "mendix_runtime_v10.12", "product_id": "CSAFPID-1637566", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.12:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.6", "product": { "name": "mendix_runtime_v10.6", "product_id": "CSAFPID-1637624", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.6", "product": { "name": "mendix_runtime_v10.6", "product_id": "CSAFPID-1637567", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.6:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10", "product": { "name": "mendix_runtime_v10", "product_id": "CSAFPID-1637622", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10", "product": { "name": "mendix_runtime_v10", "product_id": "CSAFPID-1637565", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v8", "product": { "name": "mendix_runtime_v8", "product_id": "CSAFPID-1637625", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v8", "product": { "name": "mendix_runtime_v8", "product_id": "CSAFPID-1637568", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v8:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v9", "product": { "name": "mendix_runtime_v9", "product_id": "CSAFPID-1637626", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v9:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v9", "product": { "name": "mendix_runtime_v9", "product_id": "CSAFPID-1637569", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v9:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam_scc", "product": { "name": "sicam_scc", "product_id": "CSAFPID-1637841", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sicam_scc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam_scc__10.0", "product": { "name": "sicam_scc__10.0", "product_id": "CSAFPID-1637471", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sicam_scc__10.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_batch_v9.1", "product": { "name": "simatic_batch_v9.1", "product_id": "CSAFPID-1625340", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_batch_v9.1", "product": { "name": "simatic_batch_v9.1", "product_id": "CSAFPID-1470063", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product": { "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product_id": "CSAFPID-1637811", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1242-7_v2__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product": { "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product_id": "CSAFPID-1476332", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1242-7_v2__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1__incl._siplus_variants_", "product_id": "CSAFPID-1637649", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1__incl._siplus_variants_", "product_id": "CSAFPID-1476333", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product_id": "CSAFPID-1637650", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_dnp3__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product_id": "CSAFPID-1476082", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_dnp3__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product_id": "CSAFPID-1637651", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_iec__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product_id": "CSAFPID-1476083", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_iec__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-7_lte", "product": { "name": "simatic_cp_1243-7_lte", "product_id": "CSAFPID-1637812", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-7_lte:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-7_lte", "product": { "name": "simatic_cp_1243-7_lte", "product_id": "CSAFPID-1476334", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-7_lte:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-8_irc", "product": { "name": "simatic_cp_1243-8_irc", "product_id": "CSAFPID-1476086", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-8_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_", "product": { "name": "simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_", "product_id": "CSAFPID-1637652", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product": { "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product_id": "CSAFPID-1637813", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_hmi_comfort_panels__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product": { "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product_id": "CSAFPID-1637557", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_hmi_comfort_panels__incl._siplus_variants_:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2020", "product": { "name": "simatic_information_server_2020", "product_id": "CSAFPID-1637837", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2020:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2020", "product": { "name": "simatic_information_server_2020", "product_id": "CSAFPID-1637574", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2020:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2022", "product": { "name": "simatic_information_server_2022", "product_id": "CSAFPID-1637613", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2022:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2022", "product": { "name": "simatic_information_server_2022", "product_id": "CSAFPID-1637570", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2022:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2024", "product": { "name": "simatic_information_server_2024", "product_id": "CSAFPID-1637614", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2024:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2024", "product": { "name": "simatic_information_server_2024", "product_id": "CSAFPID-1637571", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2024:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagbase", "product": { "name": "simatic_ipc_diagbase", "product_id": "CSAFPID-1637619", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagbase:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagbase", "product": { "name": "simatic_ipc_diagbase", "product_id": "CSAFPID-1497078", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagbase:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagmonitor", "product": { "name": "simatic_ipc_diagmonitor", "product_id": "CSAFPID-744729", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagmonitor:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagmonitor", "product": { "name": "simatic_ipc_diagmonitor", "product_id": "CSAFPID-1457904", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagmonitor:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_7_v9.1", "product": { "name": "simatic_pcs_7_v9.1", "product_id": "CSAFPID-1501190", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_7_v9.1", "product": { "name": "simatic_pcs_7_v9.1", "product_id": "CSAFPID-1457909", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.0", "product": { "name": "simatic_pcs_neo_v4.0", "product_id": "CSAFPID-1637615", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.0", "product": { "name": "simatic_pcs_neo_v4.0", "product_id": "CSAFPID-1496915", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.1", "product": { "name": "simatic_pcs_neo_v4.1", "product_id": "CSAFPID-1637616", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.1", "product": { "name": "simatic_pcs_neo_v4.1", "product_id": "CSAFPID-1637572", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v5.0", "product": { "name": "simatic_pcs_neo_v5.0", "product_id": "CSAFPID-1637617", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v5.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v5.0", "product": { "name": "simatic_pcs_neo_v5.0", "product_id": "CSAFPID-1637573", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v5.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2020", "product": { "name": "simatic_process_historian_2020", "product_id": "CSAFPID-1637838", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2020:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2020", "product": { "name": "simatic_process_historian_2020", "product_id": "CSAFPID-1637575", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2020:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2022", "product": { "name": "simatic_process_historian_2022", "product_id": "CSAFPID-1637839", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2022:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2022", "product": { "name": "simatic_process_historian_2022", "product_id": "CSAFPID-1637576", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2022:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_cmiit", "product": { "name": "simatic_reader_rf610r_cmiit", "product_id": "CSAFPID-1637577", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_", "product": { "name": "simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_", "product_id": "CSAFPID-1637857", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_etsi", "product": { "name": "simatic_reader_rf610r_etsi", "product_id": "CSAFPID-1637578", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_", "product": { "name": "simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_", "product_id": "CSAFPID-1637858", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_fcc", "product": { "name": "simatic_reader_rf610r_fcc", "product_id": "CSAFPID-1637579", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_", "product": { "name": "simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_", "product_id": "CSAFPID-1637859", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_cmiit", "product": { "name": "simatic_reader_rf615r_cmiit", "product_id": "CSAFPID-1637580", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_", "product": { "name": "simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_", "product_id": "CSAFPID-1637860", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_etsi", "product": { "name": "simatic_reader_rf615r_etsi", "product_id": "CSAFPID-1637581", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_", "product": { "name": "simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_", "product_id": "CSAFPID-1637861", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_fcc", "product": { "name": "simatic_reader_rf615r_fcc", "product_id": "CSAFPID-1637582", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_", "product": { "name": "simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_", "product_id": "CSAFPID-1637862", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_arib", "product": { "name": "simatic_reader_rf650r_arib", "product_id": "CSAFPID-1637583", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_", "product": { "name": "simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_", "product_id": "CSAFPID-1637863", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_cmiit", "product": { "name": "simatic_reader_rf650r_cmiit", "product_id": "CSAFPID-1637584", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_", "product": { "name": "simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_", "product_id": "CSAFPID-1637864", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_etsi", "product": { "name": "simatic_reader_rf650r_etsi", "product_id": "CSAFPID-1637585", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_", "product": { "name": "simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_", "product_id": "CSAFPID-1637865", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_fcc", "product": { "name": "simatic_reader_rf650r_fcc", "product_id": "CSAFPID-1637586", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_", "product": { "name": "simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_", "product_id": "CSAFPID-1637866", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_arib", "product": { "name": "simatic_reader_rf680r_arib", "product_id": "CSAFPID-1637587", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_", "product": { "name": "simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_", "product_id": "CSAFPID-1637867", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_cmiit", "product": { "name": "simatic_reader_rf680r_cmiit", "product_id": "CSAFPID-1637588", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_", "product": { "name": "simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_", "product_id": "CSAFPID-1637868", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_etsi", "product": { "name": "simatic_reader_rf680r_etsi", "product_id": "CSAFPID-1637589", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_", "product": { "name": "simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_", "product_id": "CSAFPID-1637869", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_fcc", "product": { "name": "simatic_reader_rf680r_fcc", "product_id": "CSAFPID-1637590", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_", "product": { "name": "simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_", "product_id": "CSAFPID-1637870", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_arib", "product": { "name": "simatic_reader_rf685r_arib", "product_id": "CSAFPID-1637591", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_", "product": { "name": "simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_", "product_id": "CSAFPID-1637871", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_cmiit", "product": { "name": "simatic_reader_rf685r_cmiit", "product_id": "CSAFPID-1637592", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_", "product": { "name": "simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_", "product_id": "CSAFPID-1637872", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_etsi", "product": { "name": "simatic_reader_rf685r_etsi", "product_id": "CSAFPID-1637593", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_", "product": { "name": "simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_", "product_id": "CSAFPID-1637873", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_fcc", "product": { "name": "simatic_reader_rf685r_fcc", "product_id": "CSAFPID-1637594", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_", "product": { "name": "simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_", "product_id": "CSAFPID-1637874", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1140r", "product": { "name": "simatic_rf1140r", "product_id": "CSAFPID-1637595", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1140r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1140r__6gt2831-6cb00_", "product": { "name": "simatic_rf1140r__6gt2831-6cb00_", "product_id": "CSAFPID-1637875", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1140r__6gt2831-6cb00_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1170r", "product": { "name": "simatic_rf1170r", "product_id": "CSAFPID-1637596", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1170r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1170r__6gt2831-6bb00_", "product": { "name": "simatic_rf1170r__6gt2831-6bb00_", "product_id": "CSAFPID-1637876", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1170r__6gt2831-6bb00_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf166c", "product": { "name": "simatic_rf166c", "product_id": "CSAFPID-1637597", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf166c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf166c__6gt2002-0ee20_", "product": { "name": "simatic_rf166c__6gt2002-0ee20_", "product_id": "CSAFPID-1637877", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf166c__6gt2002-0ee20_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf185c", "product": { "name": "simatic_rf185c", "product_id": "CSAFPID-1637598", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf185c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf185c__6gt2002-0je10_", "product": { "name": "simatic_rf185c__6gt2002-0je10_", "product_id": "CSAFPID-1637878", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf185c__6gt2002-0je10_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186c", "product": { "name": "simatic_rf186c", "product_id": "CSAFPID-1637599", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186c__6gt2002-0je20_", "product": { "name": "simatic_rf186c__6gt2002-0je20_", "product_id": "CSAFPID-1637879", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186c__6gt2002-0je20_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186ci", "product": { "name": "simatic_rf186ci", "product_id": "CSAFPID-1637600", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186ci:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186ci__6gt2002-0je50_", "product": { "name": "simatic_rf186ci__6gt2002-0je50_", "product_id": "CSAFPID-1637880", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186ci__6gt2002-0je50_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188c", "product": { "name": "simatic_rf188c", "product_id": "CSAFPID-1637601", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188c__6gt2002-0je40_", "product": { "name": "simatic_rf188c__6gt2002-0je40_", "product_id": "CSAFPID-1637881", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188c__6gt2002-0je40_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188ci", "product": { "name": "simatic_rf188ci", "product_id": "CSAFPID-1637602", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188ci:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188ci__6gt2002-0je60_", "product": { "name": "simatic_rf188ci__6gt2002-0je60_", "product_id": "CSAFPID-1637882", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188ci__6gt2002-0je60_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf360r", "product": { "name": "simatic_rf360r", "product_id": "CSAFPID-1637603", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf360r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf360r__6gt2801-5ba30_", "product": { "name": "simatic_rf360r__6gt2801-5ba30_", "product_id": "CSAFPID-1637883", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf360r__6gt2801-5ba30_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_", "product": { "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_", "product_id": "CSAFPID-1615260", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_", "product": { "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_", "product_id": "CSAFPID-1615261", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_", "product": { "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_", "product_id": "CSAFPID-1615262", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_", "product": { "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_", "product_id": "CSAFPID-1615263", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-165973", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-186768", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-855579", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637479", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_advanced:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637482", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637483", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637480", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v19:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637481", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v20:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_advanced", "product": { "name": "simatic_wincc_runtime_advanced", "product_id": "CSAFPID-766087", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_advanced", "product": { "name": "simatic_wincc_runtime_advanced", "product_id": "CSAFPID-1637558", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v17", "product": { "name": "simatic_wincc_runtime_professional_v17", "product_id": "CSAFPID-1637887", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v18", "product": { "name": "simatic_wincc_runtime_professional_v18", "product_id": "CSAFPID-1501188", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v18", "product": { "name": "simatic_wincc_runtime_professional_v18", "product_id": "CSAFPID-1457962", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v19", "product": { "name": "simatic_wincc_runtime_professional_v19", "product_id": "CSAFPID-1501192", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v19", "product": { "name": "simatic_wincc_runtime_professional_v19", "product_id": "CSAFPID-1457963", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v20", "product": { "name": "simatic_wincc_runtime_professional_v20", "product_id": "CSAFPID-1637888", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v20:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.4", "product": { "name": "simatic_wincc_v7.4", "product_id": "CSAFPID-1501193", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.4", "product": { "name": "simatic_wincc_v7.4", "product_id": "CSAFPID-1457965", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.5", "product": { "name": "simatic_wincc_v7.5", "product_id": "CSAFPID-1501191", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.5", "product": { "name": "simatic_wincc_v7.5", "product_id": "CSAFPID-1457966", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v8.0", "product": { "name": "simatic_wincc_v8.0", "product_id": "CSAFPID-1501189", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v8.0", "product": { "name": "simatic_wincc_v8.0", "product_id": "CSAFPID-1457967", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinec_nms", "product": { "name": "sinec_nms", "product_id": "CSAFPID-309392", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinec_nms", "product": { "name": "sinec_nms", "product_id": "CSAFPID-1458012", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinec_nms:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_client", "product": { "name": "sinema_remote_connect_client", "product_id": "CSAFPID-894438", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_client:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_client", "product": { "name": "sinema_remote_connect_client", "product_id": "CSAFPID-1494867", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_client:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_server", "product": { "name": "sinema_remote_connect_server", "product_id": "CSAFPID-218852", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_server", "product": { "name": "sinema_remote_connect_server", "product_id": "CSAFPID-1496914", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_server:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v4", "product": { "name": "sinumerik_828d_v4", "product_id": "CSAFPID-1637627", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v4", "product": { "name": "sinumerik_828d_v4", "product_id": "CSAFPID-1637606", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v5", "product": { "name": "sinumerik_828d_v5", "product_id": "CSAFPID-1637762", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v5", "product": { "name": "sinumerik_828d_v5", "product_id": "CSAFPID-1637607", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_840d_sl_v4", "product": { "name": "sinumerik_840d_sl_v4", "product_id": "CSAFPID-1637628", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_840d_sl_v4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_840d_sl_v4", "product": { "name": "sinumerik_840d_sl_v4", "product_id": "CSAFPID-1637608", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_840d_sl_v4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_one", "product": { "name": "sinumerik_one", "product_id": "CSAFPID-455030", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_one:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_one", "product": { "name": "sinumerik_one", "product_id": "CSAFPID-1457969", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_one:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_", "product": { "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_", "product_id": "CSAFPID-1615264", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_tim_1531_irc", "product": { "name": "siplus_tim_1531_irc", "product_id": "CSAFPID-1476100", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_tim_1531_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_tim_1531_irc__6ag1543-1mx00-7xe0_", "product": { "name": "siplus_tim_1531_irc__6ag1543-1mx00-7xe0_", "product_id": "CSAFPID-1637814", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_tim_1531_irc__6ag1543-1mx00-7xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sitipe_at", "product": { "name": "sitipe_at", "product_id": "CSAFPID-1637842", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sitipe_at:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2302", "product": { "name": "tecnomatix_plant_simulation_v2302", "product_id": "CSAFPID-1637816", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2302", "product": { "name": "tecnomatix_plant_simulation_v2302", "product_id": "CSAFPID-1465025", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2404", "product": { "name": "tecnomatix_plant_simulation_v2404", "product_id": "CSAFPID-1637817", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2404", "product": { "name": "tecnomatix_plant_simulation_v2404", "product_id": "CSAFPID-1476361", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_administrator", "product": { "name": "tia_administrator", "product_id": "CSAFPID-766096", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal", "product": { "name": "tia_portal", "product_id": "CSAFPID-1637472", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal:v16:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal__v17_update_8", "product": { "name": "tia_portal__v17_update_8", "product_id": "CSAFPID-1637474", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal__v17_update_8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal_umc__v2.13.1", "product": { "name": "tia_portal_umc__v2.13.1", "product_id": "CSAFPID-1637473", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal_umc__v2.13.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tim_1531_irc", "product": { "name": "tim_1531_irc", "product_id": "CSAFPID-1476101", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tim_1531_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tim_1531_irc__6gk7543-1mx00-0xe0_", "product": { "name": "tim_1531_irc__6gk7543-1mx00-0xe0_", "product_id": "CSAFPID-1637815", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tim_1531_irc__6gk7543-1mx00-0xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v16", "product": { "name": "totally_integrated_automation_portal__tia_portal__v16", "product_id": "CSAFPID-1615256", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v16", "product": { "name": "totally_integrated_automation_portal__tia_portal__v16", "product_id": "CSAFPID-1458015", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v17", "product": { "name": "totally_integrated_automation_portal__tia_portal__v17", "product_id": "CSAFPID-1615257", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v17", "product": { "name": "totally_integrated_automation_portal__tia_portal__v17", "product_id": "CSAFPID-1458016", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v18", "product": { "name": "totally_integrated_automation_portal__tia_portal__v18", "product_id": "CSAFPID-1615258", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v18", "product": { "name": "totally_integrated_automation_portal__tia_portal__v18", "product_id": "CSAFPID-1458017", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v19", "product": { "name": "totally_integrated_automation_portal__tia_portal__v19", "product_id": "CSAFPID-1637618", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v19", "product": { "name": "totally_integrated_automation_portal__tia_portal__v19", "product_id": "CSAFPID-1470073", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637469", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:8_software_solution:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637470", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:a8000_device:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637468", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:egs_device:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2006-5051", "references": [ { "category": "self", "summary": "CVE-2006-5051", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2006/CVE-2006-5051.json" } ], "title": "CVE-2006-5051" }, { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-28827", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28827.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-30755", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30755.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-30756", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30756.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-30756" }, { "cve": "CVE-2023-46850", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2023-46850", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46850.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-894438" ] } ], "title": "CVE-2023-46850" }, { "cve": "CVE-2023-49069", "cwe": { "id": "CWE-204", "name": "Observable Response Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Response Discrepancy", "title": "CWE-204" } ], "product_status": { "known_affected": [ "CSAFPID-1637565", "CSAFPID-1637566", "CSAFPID-1637567", "CSAFPID-1637568", "CSAFPID-1637569", "CSAFPID-1637622", "CSAFPID-1637623", "CSAFPID-1637624", "CSAFPID-1637625", "CSAFPID-1637626" ] }, "references": [ { "category": "self", "summary": "CVE-2023-49069", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49069.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1637565", "CSAFPID-1637566", "CSAFPID-1637567", "CSAFPID-1637568", "CSAFPID-1637569", "CSAFPID-1637622", "CSAFPID-1637623", "CSAFPID-1637624", "CSAFPID-1637625", "CSAFPID-1637626" ] } ], "title": "CVE-2023-49069" }, { "cve": "CVE-2024-2004", "cwe": { "id": "CWE-319", "name": "Cleartext Transmission of Sensitive Information" }, "notes": [ { "category": "other", "text": "Cleartext Transmission of Sensitive Information", "title": "CWE-319" }, { "category": "other", "text": "Misinterpretation of Input", "title": "CWE-115" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2004", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2004.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2004" }, { "cve": "CVE-2024-2379", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2379", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2379.json" } ], "title": "CVE-2024-2379" }, { "cve": "CVE-2024-2398", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2398", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2398" }, { "cve": "CVE-2024-2466", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "other", "text": "Improper Validation of Certificate with Host Mismatch", "title": "CWE-297" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2466", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2466.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2466" }, { "cve": "CVE-2024-6387", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "other", "text": "Signal Handler Race Condition", "title": "CWE-364" } ], "product_status": { "known_affected": [ "CSAFPID-1637818", "CSAFPID-218852", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6387.json" } ], "title": "CVE-2024-6387" }, { "cve": "CVE-2024-32006", "cwe": { "id": "CWE-613", "name": "Insufficient Session Expiration" }, "notes": [ { "category": "other", "text": "Insufficient Session Expiration", "title": "CWE-613" } ], "product_status": { "known_affected": [ "CSAFPID-1494867", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32006", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32006.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1494867", "CSAFPID-894438" ] } ], "title": "CVE-2024-32006" }, { "cve": "CVE-2024-33698", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1637472", "CSAFPID-1637473", "CSAFPID-1637474", "CSAFPID-1637570", "CSAFPID-1637571", "CSAFPID-1496915", "CSAFPID-1637572", "CSAFPID-1637573", "CSAFPID-1458012", "CSAFPID-1458015", "CSAFPID-1458016", "CSAFPID-1458017", "CSAFPID-1470073", "CSAFPID-1637613", "CSAFPID-1637614", "CSAFPID-1637615", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-309392", "CSAFPID-1615256", "CSAFPID-1615257", "CSAFPID-1615258", "CSAFPID-1637618" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33698", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33698.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637472", "CSAFPID-1637473", "CSAFPID-1637474", "CSAFPID-1637570", "CSAFPID-1637571", "CSAFPID-1496915", "CSAFPID-1637572", "CSAFPID-1637573", "CSAFPID-1458012", "CSAFPID-1458015", "CSAFPID-1458016", "CSAFPID-1458017", "CSAFPID-1470073", "CSAFPID-1637613", "CSAFPID-1637614", "CSAFPID-1637615", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-309392", "CSAFPID-1615256", "CSAFPID-1615257", "CSAFPID-1615258", "CSAFPID-1637618" ] } ], "title": "CVE-2024-33698" }, { "cve": "CVE-2024-34057", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" } ], "product_status": { "known_affected": [ "CSAFPID-1637468", "CSAFPID-1637469", "CSAFPID-1637470", "CSAFPID-1637471", "CSAFPID-1637840", "CSAFPID-1637841", "CSAFPID-1637842" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34057", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34057.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637468", "CSAFPID-1637469", "CSAFPID-1637470", "CSAFPID-1637471", "CSAFPID-1637840", "CSAFPID-1637841", "CSAFPID-1637842" ] } ], "title": "CVE-2024-34057" }, { "cve": "CVE-2024-35783", "cwe": { "id": "CWE-250", "name": "Execution with Unnecessary Privileges" }, "notes": [ { "category": "other", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" } ], "product_status": { "known_affected": [ "CSAFPID-1470063", "CSAFPID-1637574", "CSAFPID-1637570", "CSAFPID-1457909", "CSAFPID-1637575", "CSAFPID-1637576", "CSAFPID-1457962", "CSAFPID-1457963", "CSAFPID-1457965", "CSAFPID-1457966", "CSAFPID-1457967", "CSAFPID-1625340", "CSAFPID-1637837", "CSAFPID-1637613", "CSAFPID-1501190", "CSAFPID-1637838", "CSAFPID-1637839", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189" ] }, "references": [ { "category": "self", "summary": "CVE-2024-35783", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-35783.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1470063", "CSAFPID-1637574", "CSAFPID-1637570", "CSAFPID-1457909", "CSAFPID-1637575", "CSAFPID-1637576", "CSAFPID-1457962", "CSAFPID-1457963", "CSAFPID-1457965", "CSAFPID-1457966", "CSAFPID-1457967", "CSAFPID-1625340", "CSAFPID-1637837", "CSAFPID-1637613", "CSAFPID-1501190", "CSAFPID-1637838", "CSAFPID-1637839", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189" ] } ], "title": "CVE-2024-35783" }, { "cve": "CVE-2024-37990", "cwe": { "id": "CWE-912", "name": "Hidden Functionality" }, "notes": [ { "category": "other", "text": "Hidden Functionality", "title": "CWE-912" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37990", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37990.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37990" }, { "cve": "CVE-2024-37992", "cwe": { "id": "CWE-703", "name": "Improper Check or Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37992", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37992.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37992" }, { "cve": "CVE-2024-37993", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37993", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37993.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37993" }, { "cve": "CVE-2024-37994", "cwe": { "id": "CWE-912", "name": "Hidden Functionality" }, "notes": [ { "category": "other", "text": "Hidden Functionality", "title": "CWE-912" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37994", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37994.json" } ], "title": "CVE-2024-37994" }, { "cve": "CVE-2024-37995", "cwe": { "id": "CWE-703", "name": "Improper Check or Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37995", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37995.json" } ], "scores": [ { "cvss_v3": { "baseScore": 2.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37995" }, { "cve": "CVE-2024-38355", "cwe": { "id": "CWE-754", "name": "Improper Check for Unusual or Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-855579", "CSAFPID-1637480", "CSAFPID-1637481", "CSAFPID-165973", "CSAFPID-186768", "CSAFPID-1637482", "CSAFPID-1637483", "CSAFPID-1637884", "CSAFPID-1637885", "CSAFPID-1637886", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-1637887", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1637888", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189", "CSAFPID-766096" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38355", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38355.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-855579", "CSAFPID-1637480", "CSAFPID-1637481", "CSAFPID-165973", "CSAFPID-186768", "CSAFPID-1637482", "CSAFPID-1637483", "CSAFPID-1637884", "CSAFPID-1637885", "CSAFPID-1637886", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-1637887", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1637888", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189", "CSAFPID-766096" ] } ], "title": "CVE-2024-38355" }, { "cve": "CVE-2024-41170", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Stack-based Buffer Overflow", "title": "CWE-121" } ], "product_status": { "known_affected": [ "CSAFPID-1465025", "CSAFPID-1476361", "CSAFPID-1637816", "CSAFPID-1637817" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41170", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41170.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1465025", "CSAFPID-1476361", "CSAFPID-1637816", "CSAFPID-1637817" ] } ], "title": "CVE-2024-41170" }, { "cve": "CVE-2024-41171", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "other", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" } ], "product_status": { "known_affected": [ "CSAFPID-1637606", "CSAFPID-1637607", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637762", "CSAFPID-1637628", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41171", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41171.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637606", "CSAFPID-1637607", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637762", "CSAFPID-1637628", "CSAFPID-455030" ] } ], "title": "CVE-2024-41171" }, { "cve": "CVE-2024-42344", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" } ], "product_status": { "known_affected": [ "CSAFPID-1494867", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42344", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42344.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1494867", "CSAFPID-894438" ] } ], "title": "CVE-2024-42344" }, { "cve": "CVE-2024-42345", "cwe": { "id": "CWE-384", "name": "Session Fixation" }, "notes": [ { "category": "other", "text": "Session Fixation", "title": "CWE-384" } ], "product_status": { "known_affected": [ "CSAFPID-1496914", "CSAFPID-218852" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42345", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42345.json" } ], "title": "CVE-2024-42345" }, { "cve": "CVE-2024-43781", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" } ], "product_status": { "known_affected": [ "CSAFPID-1637606", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637628", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-43781", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43781.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637606", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637628", "CSAFPID-455030" ] } ], "title": "CVE-2024-43781" }, { "cve": "CVE-2024-44087", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1553852", "CSAFPID-1637609", "CSAFPID-1637610", "CSAFPID-1637629", "CSAFPID-1637630", "CSAFPID-1637631" ] }, "references": [ { "category": "self", "summary": "CVE-2024-44087", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44087.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1553852", "CSAFPID-1637609", "CSAFPID-1637610", "CSAFPID-1637629", "CSAFPID-1637630", "CSAFPID-1637631" ] } ], "title": "CVE-2024-44087" }, { "cve": "CVE-2024-45032", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "other", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" } ], "product_status": { "known_affected": [ "CSAFPID-1637611", "CSAFPID-1637612", "CSAFPID-1637809", "CSAFPID-1637810" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45032", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45032.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637611", "CSAFPID-1637612", "CSAFPID-1637809", "CSAFPID-1637810" ] } ], "title": "CVE-2024-45032" } ] }
NCSC-2024-0362
Vulnerability from csaf_ncscnl
Notes
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", "title": "Interpretaties" }, { "category": "description", "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Misinterpretation of Input", "title": "CWE-115" }, { "category": "general", "text": "Hidden Functionality", "title": "CWE-912" }, { "category": "general", "text": "Signal Handler Race Condition", "title": "CWE-364" }, { "category": "general", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "general", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" }, { "category": "general", "text": "Improper Validation of Certificate with Host Mismatch", "title": "CWE-297" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" }, { "category": "general", "text": "Cleartext Transmission of Sensitive Information", "title": "CWE-319" }, { "category": "general", "text": "Insufficient Session Expiration", "title": "CWE-613" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" }, { "category": "general", "text": "Observable Response Discrepancy", "title": "CWE-204" }, { "category": "general", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" }, { "category": "general", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "general", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" }, { "category": "general", "text": "Improper Access Control", "title": "CWE-284" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" }, { "category": "general", "text": "NULL Pointer Dereference", "title": "CWE-476" }, { "category": "general", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "general", "text": "Session Fixation", "title": "CWE-384" }, { "category": "general", "text": "Heap-based Buffer Overflow", "title": "CWE-122" }, { "category": "general", "text": "Stack-based Buffer Overflow", "title": "CWE-121" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" }, { "category": "general", "text": "Improper Input Validation", "title": "CWE-20" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-039007.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-097435.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-097786.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-103653.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-342438.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-359713.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-417159.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-423808.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-427715.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-446545.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-629254.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-673996.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-765405.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-773256.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-869574.pdf" } ], "title": "Kwetsbaarheden verholpen in Siemens producten", "tracking": { "current_release_date": "2024-09-10T18:20:41.668720Z", "id": "NCSC-2024-0362", "initial_release_date": "2024-09-10T18:20:41.668720Z", "revision_history": [ { "date": "2024-09-10T18:20:41.668720Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "ai_model_deployer", "product": { "name": "ai_model_deployer", "product_id": "CSAFPID-1637884", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:ai_model_deployer:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v5", "product": { "name": "automation_license_manager_v5", "product_id": "CSAFPID-1637629", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v5", "product": { "name": "automation_license_manager_v5", "product_id": "CSAFPID-1553852", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.0", "product": { "name": "automation_license_manager_v6.0", "product_id": "CSAFPID-1637630", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.0", "product": { "name": "automation_license_manager_v6.0", "product_id": "CSAFPID-1637609", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.2", "product": { "name": "automation_license_manager_v6.2", "product_id": "CSAFPID-1637631", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.2:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "automation_license_manager_v6.2", "product": { "name": "automation_license_manager_v6.2", "product_id": "CSAFPID-1637610", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:automation_license_manager_v6.2:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_", "product": { "name": "data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_", "product_id": "CSAFPID-1637885", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:data_flow_monitoring_industrial_edge_device_user_interface__dfm_ied_ui_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "eti5_ethernet_int._1x100tx_iec61850", "product": { "name": "eti5_ethernet_int._1x100tx_iec61850", "product_id": "CSAFPID-1637840", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:eti5_ethernet_int._1x100tx_iec61850:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_os__iem-os_", "product": { "name": "industrial_edge_management_os__iem-os_", "product_id": "CSAFPID-1637818", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_os__iem-os_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_pro", "product": { "name": "industrial_edge_management_pro", "product_id": "CSAFPID-1637809", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_pro:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_pro", "product": { "name": "industrial_edge_management_pro", "product_id": "CSAFPID-1637611", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_pro:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_virtual", "product": { "name": "industrial_edge_management_virtual", "product_id": "CSAFPID-1637810", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_virtual:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_virtual", "product": { "name": "industrial_edge_management_virtual", "product_id": "CSAFPID-1637612", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_virtual:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "livetwin_industrial_edge_app__6av2170-0bl00-0aa0_", "product": { "name": "livetwin_industrial_edge_app__6av2170-0bl00-0aa0_", "product_id": "CSAFPID-1637886", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:livetwin_industrial_edge_app__6av2170-0bl00-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.12", "product": { "name": "mendix_runtime_v10.12", "product_id": "CSAFPID-1637623", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.12:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.12", "product": { "name": "mendix_runtime_v10.12", "product_id": "CSAFPID-1637566", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.12:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.6", "product": { "name": "mendix_runtime_v10.6", "product_id": "CSAFPID-1637624", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.6:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10.6", "product": { "name": "mendix_runtime_v10.6", "product_id": "CSAFPID-1637567", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.6:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10", "product": { "name": "mendix_runtime_v10", "product_id": "CSAFPID-1637622", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v10", "product": { "name": "mendix_runtime_v10", "product_id": "CSAFPID-1637565", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v8", "product": { "name": "mendix_runtime_v8", "product_id": "CSAFPID-1637625", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v8", "product": { "name": "mendix_runtime_v8", "product_id": "CSAFPID-1637568", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v8:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v9", "product": { "name": "mendix_runtime_v9", "product_id": "CSAFPID-1637626", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v9:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_runtime_v9", "product": { "name": "mendix_runtime_v9", "product_id": "CSAFPID-1637569", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_runtime_v9:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam_scc", "product": { "name": "sicam_scc", "product_id": "CSAFPID-1637841", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sicam_scc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam_scc__10.0", "product": { "name": "sicam_scc__10.0", "product_id": "CSAFPID-1637471", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sicam_scc__10.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_batch_v9.1", "product": { "name": "simatic_batch_v9.1", "product_id": "CSAFPID-1625340", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_batch_v9.1", "product": { "name": "simatic_batch_v9.1", "product_id": "CSAFPID-1470063", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product": { "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product_id": "CSAFPID-1637811", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1242-7_v2__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product": { "name": "simatic_cp_1242-7_v2__incl._siplus_variants_", "product_id": "CSAFPID-1476332", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1242-7_v2__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1__incl._siplus_variants_", "product_id": "CSAFPID-1637649", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1__incl._siplus_variants_", "product_id": "CSAFPID-1476333", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product_id": "CSAFPID-1637650", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_dnp3__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_dnp3__incl._siplus_variants_", "product_id": "CSAFPID-1476082", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_dnp3__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product_id": "CSAFPID-1637651", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_iec__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product": { "name": "simatic_cp_1243-1_iec__incl._siplus_variants_", "product_id": "CSAFPID-1476083", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-1_iec__incl._siplus_variants_:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-7_lte", "product": { "name": "simatic_cp_1243-7_lte", "product_id": "CSAFPID-1637812", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-7_lte:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-7_lte", "product": { "name": "simatic_cp_1243-7_lte", "product_id": "CSAFPID-1476334", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-7_lte:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-8_irc", "product": { "name": "simatic_cp_1243-8_irc", "product_id": "CSAFPID-1476086", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-8_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_", "product": { "name": "simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_", "product_id": "CSAFPID-1637652", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_cp_1243-8_irc__6gk7243-8rx30-0xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product": { "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product_id": "CSAFPID-1637813", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_hmi_comfort_panels__incl._siplus_variants_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product": { "name": "simatic_hmi_comfort_panels__incl._siplus_variants_", "product_id": "CSAFPID-1637557", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_hmi_comfort_panels__incl._siplus_variants_:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2020", "product": { "name": "simatic_information_server_2020", "product_id": "CSAFPID-1637837", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2020:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2020", "product": { "name": "simatic_information_server_2020", "product_id": "CSAFPID-1637574", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2020:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2022", "product": { "name": "simatic_information_server_2022", "product_id": "CSAFPID-1637613", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2022:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2022", "product": { "name": "simatic_information_server_2022", "product_id": "CSAFPID-1637570", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2022:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2024", "product": { "name": "simatic_information_server_2024", "product_id": "CSAFPID-1637614", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2024:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_information_server_2024", "product": { "name": "simatic_information_server_2024", "product_id": "CSAFPID-1637571", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_information_server_2024:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagbase", "product": { "name": "simatic_ipc_diagbase", "product_id": "CSAFPID-1637619", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagbase:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagbase", "product": { "name": "simatic_ipc_diagbase", "product_id": "CSAFPID-1497078", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagbase:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagmonitor", "product": { "name": "simatic_ipc_diagmonitor", "product_id": "CSAFPID-744729", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagmonitor:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_ipc_diagmonitor", "product": { "name": "simatic_ipc_diagmonitor", "product_id": "CSAFPID-1457904", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_ipc_diagmonitor:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_7_v9.1", "product": { "name": "simatic_pcs_7_v9.1", "product_id": "CSAFPID-1501190", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_7_v9.1", "product": { "name": "simatic_pcs_7_v9.1", "product_id": "CSAFPID-1457909", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.0", "product": { "name": "simatic_pcs_neo_v4.0", "product_id": "CSAFPID-1637615", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.0", "product": { "name": "simatic_pcs_neo_v4.0", "product_id": "CSAFPID-1496915", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.1", "product": { "name": "simatic_pcs_neo_v4.1", "product_id": "CSAFPID-1637616", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v4.1", "product": { "name": "simatic_pcs_neo_v4.1", "product_id": "CSAFPID-1637572", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v4.1:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v5.0", "product": { "name": "simatic_pcs_neo_v5.0", "product_id": "CSAFPID-1637617", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v5.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_pcs_neo_v5.0", "product": { "name": "simatic_pcs_neo_v5.0", "product_id": "CSAFPID-1637573", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_pcs_neo_v5.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2020", "product": { "name": "simatic_process_historian_2020", "product_id": "CSAFPID-1637838", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2020:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2020", "product": { "name": "simatic_process_historian_2020", "product_id": "CSAFPID-1637575", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2020:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2022", "product": { "name": "simatic_process_historian_2022", "product_id": "CSAFPID-1637839", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2022:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_process_historian_2022", "product": { "name": "simatic_process_historian_2022", "product_id": "CSAFPID-1637576", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_process_historian_2022:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_cmiit", "product": { "name": "simatic_reader_rf610r_cmiit", "product_id": "CSAFPID-1637577", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_", "product": { "name": "simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_", "product_id": "CSAFPID-1637857", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_cmiit__6gt2811-6bc10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_etsi", "product": { "name": "simatic_reader_rf610r_etsi", "product_id": "CSAFPID-1637578", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_", "product": { "name": "simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_", "product_id": "CSAFPID-1637858", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_etsi__6gt2811-6bc10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_fcc", "product": { "name": "simatic_reader_rf610r_fcc", "product_id": "CSAFPID-1637579", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_", "product": { "name": "simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_", "product_id": "CSAFPID-1637859", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf610r_fcc__6gt2811-6bc10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_cmiit", "product": { "name": "simatic_reader_rf615r_cmiit", "product_id": "CSAFPID-1637580", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_", "product": { "name": "simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_", "product_id": "CSAFPID-1637860", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_cmiit__6gt2811-6cc10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_etsi", "product": { "name": "simatic_reader_rf615r_etsi", "product_id": "CSAFPID-1637581", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_", "product": { "name": "simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_", "product_id": "CSAFPID-1637861", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_etsi__6gt2811-6cc10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_fcc", "product": { "name": "simatic_reader_rf615r_fcc", "product_id": "CSAFPID-1637582", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_", "product": { "name": "simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_", "product_id": "CSAFPID-1637862", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf615r_fcc__6gt2811-6cc10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_arib", "product": { "name": "simatic_reader_rf650r_arib", "product_id": "CSAFPID-1637583", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_", "product": { "name": "simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_", "product_id": "CSAFPID-1637863", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_arib__6gt2811-6ab20-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_cmiit", "product": { "name": "simatic_reader_rf650r_cmiit", "product_id": "CSAFPID-1637584", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_", "product": { "name": "simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_", "product_id": "CSAFPID-1637864", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_cmiit__6gt2811-6ab20-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_etsi", "product": { "name": "simatic_reader_rf650r_etsi", "product_id": "CSAFPID-1637585", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_", "product": { "name": "simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_", "product_id": "CSAFPID-1637865", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_etsi__6gt2811-6ab20-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_fcc", "product": { "name": "simatic_reader_rf650r_fcc", "product_id": "CSAFPID-1637586", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_", "product": { "name": "simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_", "product_id": "CSAFPID-1637866", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf650r_fcc__6gt2811-6ab20-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_arib", "product": { "name": "simatic_reader_rf680r_arib", "product_id": "CSAFPID-1637587", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_", "product": { "name": "simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_", "product_id": "CSAFPID-1637867", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_arib__6gt2811-6aa10-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_cmiit", "product": { "name": "simatic_reader_rf680r_cmiit", "product_id": "CSAFPID-1637588", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_", "product": { "name": "simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_", "product_id": "CSAFPID-1637868", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_cmiit__6gt2811-6aa10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_etsi", "product": { "name": "simatic_reader_rf680r_etsi", "product_id": "CSAFPID-1637589", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_", "product": { "name": "simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_", "product_id": "CSAFPID-1637869", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_etsi__6gt2811-6aa10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_fcc", "product": { "name": "simatic_reader_rf680r_fcc", "product_id": "CSAFPID-1637590", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_", "product": { "name": "simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_", "product_id": "CSAFPID-1637870", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf680r_fcc__6gt2811-6aa10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_arib", "product": { "name": "simatic_reader_rf685r_arib", "product_id": "CSAFPID-1637591", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_arib:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_", "product": { "name": "simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_", "product_id": "CSAFPID-1637871", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_arib__6gt2811-6ca10-4aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_cmiit", "product": { "name": "simatic_reader_rf685r_cmiit", "product_id": "CSAFPID-1637592", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_cmiit:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_", "product": { "name": "simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_", "product_id": "CSAFPID-1637872", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_cmiit__6gt2811-6ca10-2aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_etsi", "product": { "name": "simatic_reader_rf685r_etsi", "product_id": "CSAFPID-1637593", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_etsi:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_", "product": { "name": "simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_", "product_id": "CSAFPID-1637873", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_etsi__6gt2811-6ca10-0aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_fcc", "product": { "name": "simatic_reader_rf685r_fcc", "product_id": "CSAFPID-1637594", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_fcc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_", "product": { "name": "simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_", "product_id": "CSAFPID-1637874", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_reader_rf685r_fcc__6gt2811-6ca10-1aa0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1140r", "product": { "name": "simatic_rf1140r", "product_id": "CSAFPID-1637595", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1140r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1140r__6gt2831-6cb00_", "product": { "name": "simatic_rf1140r__6gt2831-6cb00_", "product_id": "CSAFPID-1637875", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1140r__6gt2831-6cb00_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1170r", "product": { "name": "simatic_rf1170r", "product_id": "CSAFPID-1637596", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1170r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf1170r__6gt2831-6bb00_", "product": { "name": "simatic_rf1170r__6gt2831-6bb00_", "product_id": "CSAFPID-1637876", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf1170r__6gt2831-6bb00_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf166c", "product": { "name": "simatic_rf166c", "product_id": "CSAFPID-1637597", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf166c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf166c__6gt2002-0ee20_", "product": { "name": "simatic_rf166c__6gt2002-0ee20_", "product_id": "CSAFPID-1637877", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf166c__6gt2002-0ee20_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf185c", "product": { "name": "simatic_rf185c", "product_id": "CSAFPID-1637598", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf185c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf185c__6gt2002-0je10_", "product": { "name": "simatic_rf185c__6gt2002-0je10_", "product_id": "CSAFPID-1637878", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf185c__6gt2002-0je10_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186c", "product": { "name": "simatic_rf186c", "product_id": "CSAFPID-1637599", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186c__6gt2002-0je20_", "product": { "name": "simatic_rf186c__6gt2002-0je20_", "product_id": "CSAFPID-1637879", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186c__6gt2002-0je20_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186ci", "product": { "name": "simatic_rf186ci", "product_id": "CSAFPID-1637600", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186ci:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf186ci__6gt2002-0je50_", "product": { "name": "simatic_rf186ci__6gt2002-0je50_", "product_id": "CSAFPID-1637880", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf186ci__6gt2002-0je50_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188c", "product": { "name": "simatic_rf188c", "product_id": "CSAFPID-1637601", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188c:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188c__6gt2002-0je40_", "product": { "name": "simatic_rf188c__6gt2002-0je40_", "product_id": "CSAFPID-1637881", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188c__6gt2002-0je40_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188ci", "product": { "name": "simatic_rf188ci", "product_id": "CSAFPID-1637602", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188ci:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf188ci__6gt2002-0je60_", "product": { "name": "simatic_rf188ci__6gt2002-0je60_", "product_id": "CSAFPID-1637882", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf188ci__6gt2002-0je60_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf360r", "product": { "name": "simatic_rf360r", "product_id": "CSAFPID-1637603", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf360r:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_rf360r__6gt2801-5ba30_", "product": { "name": "simatic_rf360r__6gt2801-5ba30_", "product_id": "CSAFPID-1637883", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_rf360r__6gt2801-5ba30_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_", "product": { "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_", "product_id": "CSAFPID-1615260", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_", "product": { "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_", "product_id": "CSAFPID-1615261", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_", "product": { "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_", "product_id": "CSAFPID-1615262", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_", "product": { "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_", "product_id": "CSAFPID-1615263", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-165973", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:7.4:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-186768", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-855579", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:8.0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637479", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_advanced:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637482", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v17:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637483", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v18:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637480", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v19:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc", "product": { "name": "simatic_wincc", "product_id": "CSAFPID-1637481", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc:runtime_professional_v20:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_advanced", "product": { "name": "simatic_wincc_runtime_advanced", "product_id": "CSAFPID-766087", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_advanced", "product": { "name": "simatic_wincc_runtime_advanced", "product_id": "CSAFPID-1637558", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:all_versions:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v17", "product": { "name": "simatic_wincc_runtime_professional_v17", "product_id": "CSAFPID-1637887", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v18", "product": { "name": "simatic_wincc_runtime_professional_v18", "product_id": "CSAFPID-1501188", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v18", "product": { "name": "simatic_wincc_runtime_professional_v18", "product_id": "CSAFPID-1457962", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v19", "product": { "name": "simatic_wincc_runtime_professional_v19", "product_id": "CSAFPID-1501192", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v19", "product": { "name": "simatic_wincc_runtime_professional_v19", "product_id": "CSAFPID-1457963", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_runtime_professional_v20", "product": { "name": "simatic_wincc_runtime_professional_v20", "product_id": "CSAFPID-1637888", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v20:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.4", "product": { "name": "simatic_wincc_v7.4", "product_id": "CSAFPID-1501193", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.4", "product": { "name": "simatic_wincc_v7.4", "product_id": "CSAFPID-1457965", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.5", "product": { "name": "simatic_wincc_v7.5", "product_id": "CSAFPID-1501191", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v7.5", "product": { "name": "simatic_wincc_v7.5", "product_id": "CSAFPID-1457966", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v8.0", "product": { "name": "simatic_wincc_v8.0", "product_id": "CSAFPID-1501189", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_wincc_v8.0", "product": { "name": "simatic_wincc_v8.0", "product_id": "CSAFPID-1457967", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinec_nms", "product": { "name": "sinec_nms", "product_id": "CSAFPID-309392", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinec_nms", "product": { "name": "sinec_nms", "product_id": "CSAFPID-1458012", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinec_nms:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_client", "product": { "name": "sinema_remote_connect_client", "product_id": "CSAFPID-894438", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_client:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_client", "product": { "name": "sinema_remote_connect_client", "product_id": "CSAFPID-1494867", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_client:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_server", "product": { "name": "sinema_remote_connect_server", "product_id": "CSAFPID-218852", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinema_remote_connect_server", "product": { "name": "sinema_remote_connect_server", "product_id": "CSAFPID-1496914", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_server:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v4", "product": { "name": "sinumerik_828d_v4", "product_id": "CSAFPID-1637627", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v4", "product": { "name": "sinumerik_828d_v4", "product_id": "CSAFPID-1637606", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v5", "product": { "name": "sinumerik_828d_v5", "product_id": "CSAFPID-1637762", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v5:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_828d_v5", "product": { "name": "sinumerik_828d_v5", "product_id": "CSAFPID-1637607", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_828d_v5:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_840d_sl_v4", "product": { "name": "sinumerik_840d_sl_v4", "product_id": "CSAFPID-1637628", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_840d_sl_v4:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_840d_sl_v4", "product": { "name": "sinumerik_840d_sl_v4", "product_id": "CSAFPID-1637608", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_840d_sl_v4:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_one", "product": { "name": "sinumerik_one", "product_id": "CSAFPID-455030", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_one:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sinumerik_one", "product": { "name": "sinumerik_one", "product_id": "CSAFPID-1457969", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sinumerik_one:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_", "product": { "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_", "product_id": "CSAFPID-1615264", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_tim_1531_irc", "product": { "name": "siplus_tim_1531_irc", "product_id": "CSAFPID-1476100", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_tim_1531_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_tim_1531_irc__6ag1543-1mx00-7xe0_", "product": { "name": "siplus_tim_1531_irc__6ag1543-1mx00-7xe0_", "product_id": "CSAFPID-1637814", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_tim_1531_irc__6ag1543-1mx00-7xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sitipe_at", "product": { "name": "sitipe_at", "product_id": "CSAFPID-1637842", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:sitipe_at:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2302", "product": { "name": "tecnomatix_plant_simulation_v2302", "product_id": "CSAFPID-1637816", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2302", "product": { "name": "tecnomatix_plant_simulation_v2302", "product_id": "CSAFPID-1465025", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2404", "product": { "name": "tecnomatix_plant_simulation_v2404", "product_id": "CSAFPID-1637817", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tecnomatix_plant_simulation_v2404", "product": { "name": "tecnomatix_plant_simulation_v2404", "product_id": "CSAFPID-1476361", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_administrator", "product": { "name": "tia_administrator", "product_id": "CSAFPID-766096", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal", "product": { "name": "tia_portal", "product_id": "CSAFPID-1637472", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal:v16:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal__v17_update_8", "product": { "name": "tia_portal__v17_update_8", "product_id": "CSAFPID-1637474", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal__v17_update_8:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tia_portal_umc__v2.13.1", "product": { "name": "tia_portal_umc__v2.13.1", "product_id": "CSAFPID-1637473", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tia_portal_umc__v2.13.1:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tim_1531_irc", "product": { "name": "tim_1531_irc", "product_id": "CSAFPID-1476101", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tim_1531_irc:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "tim_1531_irc__6gk7543-1mx00-0xe0_", "product": { "name": "tim_1531_irc__6gk7543-1mx00-0xe0_", "product_id": "CSAFPID-1637815", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:tim_1531_irc__6gk7543-1mx00-0xe0_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v16", "product": { "name": "totally_integrated_automation_portal__tia_portal__v16", "product_id": "CSAFPID-1615256", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v16", "product": { "name": "totally_integrated_automation_portal__tia_portal__v16", "product_id": "CSAFPID-1458015", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v17", "product": { "name": "totally_integrated_automation_portal__tia_portal__v17", "product_id": "CSAFPID-1615257", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v17", "product": { "name": "totally_integrated_automation_portal__tia_portal__v17", "product_id": "CSAFPID-1458016", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v18", "product": { "name": "totally_integrated_automation_portal__tia_portal__v18", "product_id": "CSAFPID-1615258", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v18", "product": { "name": "totally_integrated_automation_portal__tia_portal__v18", "product_id": "CSAFPID-1458017", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v19", "product": { "name": "totally_integrated_automation_portal__tia_portal__v19", "product_id": "CSAFPID-1637618", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "totally_integrated_automation_portal__tia_portal__v19", "product": { "name": "totally_integrated_automation_portal__tia_portal__v19", "product_id": "CSAFPID-1470073", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:0:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637469", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:8_software_solution:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637470", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:a8000_device:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "sicam", "product": { "name": "sicam", "product_id": "CSAFPID-1637468", "product_identification_helper": { "cpe": "cpe:2.3:h:siemens:sicam:egs_device:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2006-5051", "references": [ { "category": "self", "summary": "CVE-2006-5051", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2006/CVE-2006-5051.json" } ], "title": "CVE-2006-5051" }, { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-28827", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28827.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-30755", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30755.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "other", "text": "NULL Pointer Dereference", "title": "CWE-476" } ], "product_status": { "known_affected": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] }, "references": [ { "category": "self", "summary": "CVE-2023-30756", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30756.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637479", "CSAFPID-1476332", "CSAFPID-1476333", "CSAFPID-1476082", "CSAFPID-1476083", "CSAFPID-1476334", "CSAFPID-1476086", "CSAFPID-1637557", "CSAFPID-1497078", "CSAFPID-1457904", "CSAFPID-1637558", "CSAFPID-1476100", "CSAFPID-1476101", "CSAFPID-1637811", "CSAFPID-1637649", "CSAFPID-1637650", "CSAFPID-1637651", "CSAFPID-1637812", "CSAFPID-1637652", "CSAFPID-1637813", "CSAFPID-1637619", "CSAFPID-744729", "CSAFPID-766087", "CSAFPID-1637814", "CSAFPID-1637815" ] } ], "title": "CVE-2023-30756" }, { "cve": "CVE-2023-46850", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" } ], "product_status": { "known_affected": [ "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2023-46850", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46850.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-894438" ] } ], "title": "CVE-2023-46850" }, { "cve": "CVE-2023-49069", "cwe": { "id": "CWE-204", "name": "Observable Response Discrepancy" }, "notes": [ { "category": "other", "text": "Observable Response Discrepancy", "title": "CWE-204" } ], "product_status": { "known_affected": [ "CSAFPID-1637565", "CSAFPID-1637566", "CSAFPID-1637567", "CSAFPID-1637568", "CSAFPID-1637569", "CSAFPID-1637622", "CSAFPID-1637623", "CSAFPID-1637624", "CSAFPID-1637625", "CSAFPID-1637626" ] }, "references": [ { "category": "self", "summary": "CVE-2023-49069", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49069.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "CSAFPID-1637565", "CSAFPID-1637566", "CSAFPID-1637567", "CSAFPID-1637568", "CSAFPID-1637569", "CSAFPID-1637622", "CSAFPID-1637623", "CSAFPID-1637624", "CSAFPID-1637625", "CSAFPID-1637626" ] } ], "title": "CVE-2023-49069" }, { "cve": "CVE-2024-2004", "cwe": { "id": "CWE-319", "name": "Cleartext Transmission of Sensitive Information" }, "notes": [ { "category": "other", "text": "Cleartext Transmission of Sensitive Information", "title": "CWE-319" }, { "category": "other", "text": "Misinterpretation of Input", "title": "CWE-115" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2004", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2004.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2004" }, { "cve": "CVE-2024-2379", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2379", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2379.json" } ], "title": "CVE-2024-2379" }, { "cve": "CVE-2024-2398", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "notes": [ { "category": "other", "text": "Missing Release of Resource after Effective Lifetime", "title": "CWE-772" }, { "category": "other", "text": "Missing Release of Memory after Effective Lifetime", "title": "CWE-401" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2398", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2398" }, { "cve": "CVE-2024-2466", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "other", "text": "Improper Certificate Validation", "title": "CWE-295" }, { "category": "other", "text": "Improper Validation of Certificate with Host Mismatch", "title": "CWE-297" } ], "product_status": { "known_affected": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-2466", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2466.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1615260", "CSAFPID-1615261", "CSAFPID-1615262", "CSAFPID-1615263", "CSAFPID-1615264", "CSAFPID-894438" ] } ], "title": "CVE-2024-2466" }, { "cve": "CVE-2024-6387", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)", "title": "CWE-362" }, { "category": "other", "text": "Signal Handler Race Condition", "title": "CWE-364" } ], "product_status": { "known_affected": [ "CSAFPID-1637818", "CSAFPID-218852", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-6387", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6387.json" } ], "title": "CVE-2024-6387" }, { "cve": "CVE-2024-32006", "cwe": { "id": "CWE-613", "name": "Insufficient Session Expiration" }, "notes": [ { "category": "other", "text": "Insufficient Session Expiration", "title": "CWE-613" } ], "product_status": { "known_affected": [ "CSAFPID-1494867", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-32006", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-32006.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1494867", "CSAFPID-894438" ] } ], "title": "CVE-2024-32006" }, { "cve": "CVE-2024-33698", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Heap-based Buffer Overflow", "title": "CWE-122" } ], "product_status": { "known_affected": [ "CSAFPID-1637472", "CSAFPID-1637473", "CSAFPID-1637474", "CSAFPID-1637570", "CSAFPID-1637571", "CSAFPID-1496915", "CSAFPID-1637572", "CSAFPID-1637573", "CSAFPID-1458012", "CSAFPID-1458015", "CSAFPID-1458016", "CSAFPID-1458017", "CSAFPID-1470073", "CSAFPID-1637613", "CSAFPID-1637614", "CSAFPID-1637615", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-309392", "CSAFPID-1615256", "CSAFPID-1615257", "CSAFPID-1615258", "CSAFPID-1637618" ] }, "references": [ { "category": "self", "summary": "CVE-2024-33698", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33698.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637472", "CSAFPID-1637473", "CSAFPID-1637474", "CSAFPID-1637570", "CSAFPID-1637571", "CSAFPID-1496915", "CSAFPID-1637572", "CSAFPID-1637573", "CSAFPID-1458012", "CSAFPID-1458015", "CSAFPID-1458016", "CSAFPID-1458017", "CSAFPID-1470073", "CSAFPID-1637613", "CSAFPID-1637614", "CSAFPID-1637615", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-309392", "CSAFPID-1615256", "CSAFPID-1615257", "CSAFPID-1615258", "CSAFPID-1637618" ] } ], "title": "CVE-2024-33698" }, { "cve": "CVE-2024-34057", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)", "title": "CWE-120" } ], "product_status": { "known_affected": [ "CSAFPID-1637468", "CSAFPID-1637469", "CSAFPID-1637470", "CSAFPID-1637471", "CSAFPID-1637840", "CSAFPID-1637841", "CSAFPID-1637842" ] }, "references": [ { "category": "self", "summary": "CVE-2024-34057", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34057.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637468", "CSAFPID-1637469", "CSAFPID-1637470", "CSAFPID-1637471", "CSAFPID-1637840", "CSAFPID-1637841", "CSAFPID-1637842" ] } ], "title": "CVE-2024-34057" }, { "cve": "CVE-2024-35783", "cwe": { "id": "CWE-250", "name": "Execution with Unnecessary Privileges" }, "notes": [ { "category": "other", "text": "Execution with Unnecessary Privileges", "title": "CWE-250" } ], "product_status": { "known_affected": [ "CSAFPID-1470063", "CSAFPID-1637574", "CSAFPID-1637570", "CSAFPID-1457909", "CSAFPID-1637575", "CSAFPID-1637576", "CSAFPID-1457962", "CSAFPID-1457963", "CSAFPID-1457965", "CSAFPID-1457966", "CSAFPID-1457967", "CSAFPID-1625340", "CSAFPID-1637837", "CSAFPID-1637613", "CSAFPID-1501190", "CSAFPID-1637838", "CSAFPID-1637839", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189" ] }, "references": [ { "category": "self", "summary": "CVE-2024-35783", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-35783.json" } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1470063", "CSAFPID-1637574", "CSAFPID-1637570", "CSAFPID-1457909", "CSAFPID-1637575", "CSAFPID-1637576", "CSAFPID-1457962", "CSAFPID-1457963", "CSAFPID-1457965", "CSAFPID-1457966", "CSAFPID-1457967", "CSAFPID-1625340", "CSAFPID-1637837", "CSAFPID-1637613", "CSAFPID-1501190", "CSAFPID-1637838", "CSAFPID-1637839", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189" ] } ], "title": "CVE-2024-35783" }, { "cve": "CVE-2024-37990", "cwe": { "id": "CWE-912", "name": "Hidden Functionality" }, "notes": [ { "category": "other", "text": "Hidden Functionality", "title": "CWE-912" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37990", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37990.json" } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37990" }, { "cve": "CVE-2024-37992", "cwe": { "id": "CWE-703", "name": "Improper Check or Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37992", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37992.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37992" }, { "cve": "CVE-2024-37993", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "other", "text": "Improper Access Control", "title": "CWE-284" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37993", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37993.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37993" }, { "cve": "CVE-2024-37994", "cwe": { "id": "CWE-912", "name": "Hidden Functionality" }, "notes": [ { "category": "other", "text": "Hidden Functionality", "title": "CWE-912" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37994", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37994.json" } ], "title": "CVE-2024-37994" }, { "cve": "CVE-2024-37995", "cwe": { "id": "CWE-703", "name": "Improper Check or Handling of Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check or Handling of Exceptional Conditions", "title": "CWE-703" } ], "product_status": { "known_affected": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] }, "references": [ { "category": "self", "summary": "CVE-2024-37995", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37995.json" } ], "scores": [ { "cvss_v3": { "baseScore": 2.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "CSAFPID-1637577", "CSAFPID-1637578", "CSAFPID-1637579", "CSAFPID-1637580", "CSAFPID-1637581", "CSAFPID-1637582", "CSAFPID-1637583", "CSAFPID-1637584", "CSAFPID-1637585", "CSAFPID-1637586", "CSAFPID-1637587", "CSAFPID-1637588", "CSAFPID-1637589", "CSAFPID-1637590", "CSAFPID-1637591", "CSAFPID-1637592", "CSAFPID-1637593", "CSAFPID-1637594", "CSAFPID-1637595", "CSAFPID-1637596", "CSAFPID-1637597", "CSAFPID-1637598", "CSAFPID-1637599", "CSAFPID-1637600", "CSAFPID-1637601", "CSAFPID-1637602", "CSAFPID-1637603", "CSAFPID-1637857", "CSAFPID-1637858", "CSAFPID-1637859", "CSAFPID-1637860", "CSAFPID-1637861", "CSAFPID-1637862", "CSAFPID-1637863", "CSAFPID-1637864", "CSAFPID-1637865", "CSAFPID-1637866", "CSAFPID-1637867", "CSAFPID-1637868", "CSAFPID-1637869", "CSAFPID-1637870", "CSAFPID-1637871", "CSAFPID-1637872", "CSAFPID-1637873", "CSAFPID-1637874", "CSAFPID-1637875", "CSAFPID-1637876", "CSAFPID-1637877", "CSAFPID-1637878", "CSAFPID-1637879", "CSAFPID-1637880", "CSAFPID-1637881", "CSAFPID-1637882", "CSAFPID-1637883" ] } ], "title": "CVE-2024-37995" }, { "cve": "CVE-2024-38355", "cwe": { "id": "CWE-754", "name": "Improper Check for Unusual or Exceptional Conditions" }, "notes": [ { "category": "other", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "other", "text": "Improper Input Validation", "title": "CWE-20" }, { "category": "other", "text": "Improper Resource Shutdown or Release", "title": "CWE-404" } ], "product_status": { "known_affected": [ "CSAFPID-855579", "CSAFPID-1637480", "CSAFPID-1637481", "CSAFPID-165973", "CSAFPID-186768", "CSAFPID-1637482", "CSAFPID-1637483", "CSAFPID-1637884", "CSAFPID-1637885", "CSAFPID-1637886", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-1637887", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1637888", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189", "CSAFPID-766096" ] }, "references": [ { "category": "self", "summary": "CVE-2024-38355", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38355.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "CSAFPID-855579", "CSAFPID-1637480", "CSAFPID-1637481", "CSAFPID-165973", "CSAFPID-186768", "CSAFPID-1637482", "CSAFPID-1637483", "CSAFPID-1637884", "CSAFPID-1637885", "CSAFPID-1637886", "CSAFPID-1637616", "CSAFPID-1637617", "CSAFPID-1637887", "CSAFPID-1501188", "CSAFPID-1501192", "CSAFPID-1637888", "CSAFPID-1501193", "CSAFPID-1501191", "CSAFPID-1501189", "CSAFPID-766096" ] } ], "title": "CVE-2024-38355" }, { "cve": "CVE-2024-41170", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "other", "text": "Stack-based Buffer Overflow", "title": "CWE-121" } ], "product_status": { "known_affected": [ "CSAFPID-1465025", "CSAFPID-1476361", "CSAFPID-1637816", "CSAFPID-1637817" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41170", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41170.json" } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-1465025", "CSAFPID-1476361", "CSAFPID-1637816", "CSAFPID-1637817" ] } ], "title": "CVE-2024-41170" }, { "cve": "CVE-2024-41171", "cwe": { "id": "CWE-732", "name": "Incorrect Permission Assignment for Critical Resource" }, "notes": [ { "category": "other", "text": "Incorrect Permission Assignment for Critical Resource", "title": "CWE-732" } ], "product_status": { "known_affected": [ "CSAFPID-1637606", "CSAFPID-1637607", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637762", "CSAFPID-1637628", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-41171", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41171.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637606", "CSAFPID-1637607", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637762", "CSAFPID-1637628", "CSAFPID-455030" ] } ], "title": "CVE-2024-41171" }, { "cve": "CVE-2024-42344", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" } ], "product_status": { "known_affected": [ "CSAFPID-1494867", "CSAFPID-894438" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42344", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42344.json" } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1494867", "CSAFPID-894438" ] } ], "title": "CVE-2024-42344" }, { "cve": "CVE-2024-42345", "cwe": { "id": "CWE-384", "name": "Session Fixation" }, "notes": [ { "category": "other", "text": "Session Fixation", "title": "CWE-384" } ], "product_status": { "known_affected": [ "CSAFPID-1496914", "CSAFPID-218852" ] }, "references": [ { "category": "self", "summary": "CVE-2024-42345", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-42345.json" } ], "title": "CVE-2024-42345" }, { "cve": "CVE-2024-43781", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" } ], "product_status": { "known_affected": [ "CSAFPID-1637606", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637628", "CSAFPID-455030" ] }, "references": [ { "category": "self", "summary": "CVE-2024-43781", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-43781.json" } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637606", "CSAFPID-1637608", "CSAFPID-1457969", "CSAFPID-1637627", "CSAFPID-1637628", "CSAFPID-455030" ] } ], "title": "CVE-2024-43781" }, { "cve": "CVE-2024-44087", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" } ], "product_status": { "known_affected": [ "CSAFPID-1553852", "CSAFPID-1637609", "CSAFPID-1637610", "CSAFPID-1637629", "CSAFPID-1637630", "CSAFPID-1637631" ] }, "references": [ { "category": "self", "summary": "CVE-2024-44087", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44087.json" } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1553852", "CSAFPID-1637609", "CSAFPID-1637610", "CSAFPID-1637629", "CSAFPID-1637630", "CSAFPID-1637631" ] } ], "title": "CVE-2024-44087" }, { "cve": "CVE-2024-45032", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "other", "text": "Authorization Bypass Through User-Controlled Key", "title": "CWE-639" } ], "product_status": { "known_affected": [ "CSAFPID-1637611", "CSAFPID-1637612", "CSAFPID-1637809", "CSAFPID-1637810" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45032", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45032.json" } ], "scores": [ { "cvss_v3": { "baseScore": 10.0, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-1637611", "CSAFPID-1637612", "CSAFPID-1637809", "CSAFPID-1637810" ] } ], "title": "CVE-2024-45032" } ] }
cnvd-2024-38017
Vulnerability from cnvd
Title: Siemens Industrial产品空指针解引用漏洞
Description:
SIMATIC CP 1242和CP 1243相关处理器将SIMATIC S7-1200控制器连接到广域网(WAN)。它们提供集成的安全功能,如防火墙、虚拟专用网络(VPN)和支持其他数据加密协议。SIMATIC HMI Panels用于操作员控制和监控机器和设备。SIMATIC IPC DiagBase diagnostics software允许及早识别SIMATIC工控机上的任何潜在故障,并有助于避免或减少系统停机时间。SIMATIC IPC DiagMonitor监控、报告、可视化和记录SIMATIC IPCs的系统状态。它与其他系统通信,并在事件发生时做出反应。Communication processor (CP) modules SIMATIC TIM 3V-IE和TIM 4R-IE设计使SIMATIC S7-300/S7-400 CPU能够进行以太网或遥控通信。SIMATIC WinCC Runtime Advanced是一个可视化运行时平台,用于操作员控制和监控机器和工厂。SIPLUS extreme产品专为在极端条件下可靠运行而设计,基于SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE或其他设备。SIPLUS设备使用与其所基于的产品相同的固件。
Siemens Industrial产品存在空指针解引用漏洞,该漏洞源于受影响设备的 Web 服务器无法正确处理某些请求,导致监视器超时,从而可能导致指针被清理。攻击者可利用该漏洞在系统中造成拒绝服务。
Severity: 中
Patch Name: Siemens Industrial产品空指针解引用漏洞的补丁
Patch Description:
SIMATIC CP 1242和CP 1243相关处理器将SIMATIC S7-1200控制器连接到广域网(WAN)。它们提供集成的安全功能,如防火墙、虚拟专用网络(VPN)和支持其他数据加密协议。SIMATIC HMI Panels用于操作员控制和监控机器和设备。SIMATIC IPC DiagBase diagnostics software允许及早识别SIMATIC工控机上的任何潜在故障,并有助于避免或减少系统停机时间。SIMATIC IPC DiagMonitor监控、报告、可视化和记录SIMATIC IPCs的系统状态。它与其他系统通信,并在事件发生时做出反应。Communication processor (CP) modules SIMATIC TIM 3V-IE和TIM 4R-IE设计使SIMATIC S7-300/S7-400 CPU能够进行以太网或遥控通信。SIMATIC WinCC Runtime Advanced是一个可视化运行时平台,用于操作员控制和监控机器和工厂。SIPLUS extreme产品专为在极端条件下可靠运行而设计,基于SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE或其他设备。SIPLUS设备使用与其所基于的产品相同的固件。
Siemens Industrial产品存在空指针解引用漏洞,该漏洞源于受影响设备的 Web 服务器无法正确处理某些请求,导致监视器超时,从而可能导致指针被清理。攻击者可利用该漏洞在系统中造成拒绝服务。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
用户可参考如下供应商提供的安全公告获得补丁信息: https://cert-portal.siemens.com/productcert/html/ssa-423808.html
Reference: https://cert-portal.siemens.com/productcert/html/ssa-423808.html
Name | ['Siemens SIMATIC IPC DiagMonitor', 'Siemens SIMATIC WinCC Runtime Advanced', 'SIEMENS SIMATIC IPC DiagBase null', 'Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) <V2.4.8', 'Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) <V2.4.8', 'Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-7 LTE < V3.5.20', 'Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) < V3.5.20', 'Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)'] |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2023-28827" } }, "description": "SIMATIC CP 1242\u548cCP 1243\u76f8\u5173\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u548c\u652f\u6301\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u3002SIMATIC HMI Panels\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u8bbe\u5907\u3002SIMATIC IPC DiagBase diagnostics software\u5141\u8bb8\u53ca\u65e9\u8bc6\u522bSIMATIC\u5de5\u63a7\u673a\u4e0a\u7684\u4efb\u4f55\u6f5c\u5728\u6545\u969c\uff0c\u5e76\u6709\u52a9\u4e8e\u907f\u514d\u6216\u51cf\u5c11\u7cfb\u7edf\u505c\u673a\u65f6\u95f4\u3002SIMATIC IPC DiagMonitor\u76d1\u63a7\u3001\u62a5\u544a\u3001\u53ef\u89c6\u5316\u548c\u8bb0\u5f55SIMATIC IPCs\u7684\u7cfb\u7edf\u72b6\u6001\u3002\u5b83\u4e0e\u5176\u4ed6\u7cfb\u7edf\u901a\u4fe1\uff0c\u5e76\u5728\u4e8b\u4ef6\u53d1\u751f\u65f6\u505a\u51fa\u53cd\u5e94\u3002Communication processor (CP) modules SIMATIC TIM 3V-IE\u548cTIM 4R-IE\u8bbe\u8ba1\u4f7fSIMATIC S7-300/S7-400 CPU\u80fd\u591f\u8fdb\u884c\u4ee5\u592a\u7f51\u6216\u9065\u63a7\u901a\u4fe1\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u5de5\u5382\u3002SIPLUS extreme\u4ea7\u54c1\u4e13\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\uff0c\u57fa\u4e8eSIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\n\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684 Web \u670d\u52a1\u5668\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u67d0\u4e9b\u8bf7\u6c42\uff0c\u5bfc\u81f4\u76d1\u89c6\u5668\u8d85\u65f6\uff0c\u4ece\u800c\u53ef\u80fd\u5bfc\u81f4\u6307\u9488\u88ab\u6e05\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e2d\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-423808.html", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2024-38017", "openTime": "2024-09-12", "patchDescription": "SIMATIC CP 1242\u548cCP 1243\u76f8\u5173\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u548c\u652f\u6301\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u3002SIMATIC HMI Panels\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u8bbe\u5907\u3002SIMATIC IPC DiagBase diagnostics software\u5141\u8bb8\u53ca\u65e9\u8bc6\u522bSIMATIC\u5de5\u63a7\u673a\u4e0a\u7684\u4efb\u4f55\u6f5c\u5728\u6545\u969c\uff0c\u5e76\u6709\u52a9\u4e8e\u907f\u514d\u6216\u51cf\u5c11\u7cfb\u7edf\u505c\u673a\u65f6\u95f4\u3002SIMATIC IPC DiagMonitor\u76d1\u63a7\u3001\u62a5\u544a\u3001\u53ef\u89c6\u5316\u548c\u8bb0\u5f55SIMATIC IPCs\u7684\u7cfb\u7edf\u72b6\u6001\u3002\u5b83\u4e0e\u5176\u4ed6\u7cfb\u7edf\u901a\u4fe1\uff0c\u5e76\u5728\u4e8b\u4ef6\u53d1\u751f\u65f6\u505a\u51fa\u53cd\u5e94\u3002Communication processor (CP) modules SIMATIC TIM 3V-IE\u548cTIM 4R-IE\u8bbe\u8ba1\u4f7fSIMATIC S7-300/S7-400 CPU\u80fd\u591f\u8fdb\u884c\u4ee5\u592a\u7f51\u6216\u9065\u63a7\u901a\u4fe1\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u5de5\u5382\u3002SIPLUS extreme\u4ea7\u54c1\u4e13\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\uff0c\u57fa\u4e8eSIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\r\n\r\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684 Web \u670d\u52a1\u5668\u65e0\u6cd5\u6b63\u786e\u5904\u7406\u67d0\u4e9b\u8bf7\u6c42\uff0c\u5bfc\u81f4\u76d1\u89c6\u5668\u8d85\u65f6\uff0c\u4ece\u800c\u53ef\u80fd\u5bfc\u81f4\u6307\u9488\u88ab\u6e05\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e2d\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Siemens Industrial\u4ea7\u54c1\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": [ "Siemens SIMATIC IPC DiagMonitor", "Siemens SIMATIC WinCC Runtime Advanced", "SIEMENS SIMATIC IPC DiagBase null", "Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) \u003cV2.4.8", "Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) \u003cV2.4.8", "Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) \u003c V3.5.20", "Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) \u003c V3.5.20", "SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) \u003c V3.5.20", "SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) \u003c V3.5.20", "Siemens SIMATIC CP 1243-7 LTE \u003c V3.5.20", "Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) \u003c V3.5.20", "Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)" ] }, "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html", "serverity": "\u4e2d", "submitTime": "2024-09-12", "title": "Siemens Industrial\u4ea7\u54c1\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e" }
wid-sec-w-2024-2091
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "WinCC (Windows Control Center) ist ein PC-basiertes Prozessvisualisierungssystem von Siemens.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens SIMATIC WinCC ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-2091 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2091.json" }, { "category": "self", "summary": "WID-SEC-2024-2091 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2091" }, { "category": "external", "summary": "SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09", "url": "https://cert-portal.siemens.com/productcert/html/ssa-773256.html" }, { "category": "external", "summary": "SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ], "source_lang": "en-US", "title": "Siemens SIMATIC WinCC: Mehrere Schwachstellen erm\u00f6glichen Denial of Service", "tracking": { "current_release_date": "2024-09-09T22:00:00.000+00:00", "generator": { "date": "2024-09-10T11:04:55.793+00:00", "engine": { "name": "BSI-WID", "version": "1.3.6" } }, "id": "WID-SEC-W-2024-2091", "initial_release_date": "2024-09-09T22:00:00.000+00:00", "revision_history": [ { "date": "2024-09-09T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "Runtime Professional V17", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V17", "product_id": "T037398", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v17" } } }, { "category": "product_version", "name": "Runtime Professional V18", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V18", "product_id": "T037399", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v18" } } }, { "category": "product_version", "name": "Runtime Professional V19", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V19", "product_id": "T037400", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v19" } } }, { "category": "product_version", "name": "Runtime Professional V20", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V20", "product_id": "T037401", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v20" } } }, { "category": "product_version", "name": "7.4", "product": { "name": "Siemens SIMATIC WinCC 7.4", "product_id": "T037402", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:7.4" } } }, { "category": "product_version", "name": "7.5", "product": { "name": "Siemens SIMATIC WinCC 7.5", "product_id": "T037403", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:7.5" } } }, { "category": "product_version", "name": "8", "product": { "name": "Siemens SIMATIC WinCC 8.0", "product_id": "T037404", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:8.0" } } }, { "category": "product_version", "name": "Runtime Advanced", "product": { "name": "Siemens SIMATIC WinCC Runtime Advanced", "product_id": "T037405", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_advanced" } } } ], "category": "product_name", "name": "SIMATIC WinCC" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-30756" }, { "cve": "CVE-2024-38355", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Siemens SIMATIC WinCC. Dieser Fehler existiert in der Komponente Socket.IO aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung, die zu einer nicht abgefangenen Ausnahme f\u00fchrt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037404", "T037400", "T037401", "T037402", "T037403", "T037398", "T037399" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2024-38355" } ] }
WID-SEC-W-2024-2091
Vulnerability from csaf_certbund
Notes
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "WinCC (Windows Control Center) ist ein PC-basiertes Prozessvisualisierungssystem von Siemens.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens SIMATIC WinCC ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-2091 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2091.json" }, { "category": "self", "summary": "WID-SEC-2024-2091 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2091" }, { "category": "external", "summary": "SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09", "url": "https://cert-portal.siemens.com/productcert/html/ssa-773256.html" }, { "category": "external", "summary": "SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ], "source_lang": "en-US", "title": "Siemens SIMATIC WinCC: Mehrere Schwachstellen erm\u00f6glichen Denial of Service", "tracking": { "current_release_date": "2024-09-09T22:00:00.000+00:00", "generator": { "date": "2024-09-10T11:04:55.793+00:00", "engine": { "name": "BSI-WID", "version": "1.3.6" } }, "id": "WID-SEC-W-2024-2091", "initial_release_date": "2024-09-09T22:00:00.000+00:00", "revision_history": [ { "date": "2024-09-09T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "Runtime Professional V17", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V17", "product_id": "T037398", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v17" } } }, { "category": "product_version", "name": "Runtime Professional V18", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V18", "product_id": "T037399", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v18" } } }, { "category": "product_version", "name": "Runtime Professional V19", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V19", "product_id": "T037400", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v19" } } }, { "category": "product_version", "name": "Runtime Professional V20", "product": { "name": "Siemens SIMATIC WinCC Runtime Professional V20", "product_id": "T037401", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_professional_v20" } } }, { "category": "product_version", "name": "7.4", "product": { "name": "Siemens SIMATIC WinCC 7.4", "product_id": "T037402", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:7.4" } } }, { "category": "product_version", "name": "7.5", "product": { "name": "Siemens SIMATIC WinCC 7.5", "product_id": "T037403", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:7.5" } } }, { "category": "product_version", "name": "8", "product": { "name": "Siemens SIMATIC WinCC 8.0", "product_id": "T037404", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:8.0" } } }, { "category": "product_version", "name": "Runtime Advanced", "product": { "name": "Siemens SIMATIC WinCC Runtime Advanced", "product_id": "T037405", "product_identification_helper": { "cpe": "cpe:/a:siemens:simatic_wincc:runtime_advanced" } } } ], "category": "product_name", "name": "SIMATIC WinCC" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "notes": [ { "category": "description", "text": "Es bestehen mehrere Schwachstellen in Siemens SIMATIC WinCC. Diese Fehler existieren in der Komponente Runtime Advanced wegen mehrerer NULL-Zeiger-Dereferenz-Probleme. Ein entfernter, anonymer oder authentifizierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037405" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2023-30756" }, { "cve": "CVE-2024-38355", "notes": [ { "category": "description", "text": "Es besteht eine Schwachstelle in Siemens SIMATIC WinCC. Dieser Fehler existiert in der Komponente Socket.IO aufgrund einer unsachgem\u00e4\u00dfen Eingabevalidierung, die zu einer nicht abgefangenen Ausnahme f\u00fchrt. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen." } ], "product_status": { "known_affected": [ "T037404", "T037400", "T037401", "T037402", "T037403", "T037398", "T037399" ] }, "release_date": "2024-09-09T22:00:00.000+00:00", "title": "CVE-2024-38355" } ] }
fkie_cve-2023-28827
Vulnerability from fkie_nvd
Vendor | Product | Version |
---|
{ "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system." }, { "lang": "es", "value": "Se ha identificado una vulnerabilidad en SIMATIC CP 1242-7 V2 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-1 IEC (incl. variantes SIPLUS) (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-7 LTE (Todas las versiones \u0026lt; V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (Todas las versiones \u0026lt; V3.5.20), SIMATIC HMI Comfort Panels (incl. variantes SIPLUS) (Todas las versiones), SIMATIC IPC DiagBase (Todas las versiones), SIMATIC IPC DiagMonitor (todas las versiones), SIMATIC WinCC Runtime Advanced (todas las versiones), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (todas las versiones \u0026lt; V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (todas las versiones \u0026lt; V2.4.8). El servidor web de los dispositivos afectados no procesa correctamente ciertas solicitudes, lo que provoca un tiempo de espera en el watchdog, lo que podr\u00eda provocar la limpieza de punteros. Esto podr\u00eda permitir que un atacante remoto provoque una condici\u00f3n de denegaci\u00f3n de servicio en el sistema." } ], "id": "CVE-2023-28827", "lastModified": "2024-09-10T12:09:50.377", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "productcert@siemens.com", "type": "Secondary" } ], "cvssMetricV40": [ { "cvssData": { "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED" }, "source": "productcert@siemens.com", "type": "Secondary" } ] }, "published": "2024-09-10T10:15:05.347", "references": [ { "source": "productcert@siemens.com", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-476" } ], "source": "productcert@siemens.com", "type": "Primary" } ] }
icsa-24-256-09
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting these vulnerabilities to CISA." } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Multiple", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-423808.json" }, { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" }, { "category": "self", "summary": "ICS Advisory ICSA-24-256-09 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-256-09.json" }, { "category": "self", "summary": "ICS Advisory ICSA-24-256-09 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-09" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens SIMATIC, SIPLUS, and TIM", "tracking": { "current_release_date": "2025-05-06T06:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-24-256-09", "initial_release_date": "2024-09-10T00:00:00.000000Z", "revision_history": [ { "date": "2024-09-10T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2025-05-06T06:00:00.000000Z", "legacy_version": "Revision", "number": "2", "summary": "Revision - Fixing typos" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-7 LTE", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "SIMATIC CP 1243-7 LTE" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)", "product_id": "CSAFPID-0006", "product_identification_helper": { "model_numbers": [ "6GK7243-8RX30-0XE0" ] } } } ], "category": "product_name", "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagBase", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "SIMATIC IPC DiagBase" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagMonitor", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "SIMATIC IPC DiagMonitor" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC WinCC Runtime Advanced", "product_id": "CSAFPID-0010" } } ], "category": "product_name", "name": "SIMATIC WinCC Runtime Advanced" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2.4.8", "product": { "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)", "product_id": "CSAFPID-0011", "product_identification_helper": { "model_numbers": [ "6AG1543-1MX00-7XE0" ] } } } ], "category": "product_name", "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2.4.8", "product": { "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)", "product_id": "CSAFPID-0012", "product_identification_helper": { "model_numbers": [ "6GK7543-1MX00-0XE0" ] } } } ], "category": "product_name", "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. \r\n\r\nThis could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference.\r\n\r\nThis could allow a remote attacker with no privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-30756" } ] }
ICSA-24-256-09
Vulnerability from csaf_cisa
Notes
{ "document": { "acknowledgments": [ { "organization": "Siemens ProductCERT", "summary": "reporting these vulnerabilities to CISA." } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.", "title": "Summary" }, { "category": "general", "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity", "title": "General Recommendations" }, { "category": "general", "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories", "title": "Additional Resources" }, { "category": "legal_disclaimer", "text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.", "title": "Terms of Use" }, { "category": "legal_disclaimer", "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.", "title": "Legal Notice" }, { "category": "other", "text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.", "title": "Advisory Conversion Disclaimer" }, { "category": "other", "text": "Multiple", "title": "Critical infrastructure sectors" }, { "category": "other", "text": "Worldwide", "title": "Countries/areas deployed" }, { "category": "other", "text": "Germany", "title": "Company headquarters location" }, { "category": "general", "text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.", "title": "Recommended Practices" }, { "category": "general", "text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.", "title": "Recommended Practices" }, { "category": "general", "text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.", "title": "Recommended Practices" }, { "category": "general", "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.", "title": "Recommended Practices" }, { "category": "general", "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.", "title": "Recommended Practices" } ], "publisher": { "category": "other", "contact_details": "central@cisa.dhs.gov", "name": "CISA", "namespace": "https://www.cisa.gov/" }, "references": [ { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - CSAF Version", "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-423808.json" }, { "category": "self", "summary": "SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products - HTML Version", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" }, { "category": "self", "summary": "ICS Advisory ICSA-24-256-09 JSON", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-256-09.json" }, { "category": "self", "summary": "ICS Advisory ICSA-24-256-09 - Web Version", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-256-09" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/topics/industrial-control-systems" }, { "category": "external", "summary": "Recommended Practices", "url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf" }, { "category": "external", "summary": "Recommended Practices", "url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B" } ], "title": "Siemens SIMATIC, SIPLUS, and TIM", "tracking": { "current_release_date": "2025-05-06T06:00:00.000000Z", "generator": { "engine": { "name": "CISA CSAF Generator", "version": "1.0.0" } }, "id": "ICSA-24-256-09", "initial_release_date": "2024-09-10T00:00:00.000000Z", "revision_history": [ { "date": "2024-09-10T00:00:00.000000Z", "legacy_version": "1.0", "number": "1", "summary": "Publication Date" }, { "date": "2025-05-06T06:00:00.000000Z", "legacy_version": "Revision", "number": "2", "summary": "Revision - Fixing typos" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-7 LTE", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "SIMATIC CP 1243-7 LTE" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV3.5.20", "product": { "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)", "product_id": "CSAFPID-0006", "product_identification_helper": { "model_numbers": [ "6GK7243-8RX30-0XE0" ] } } } ], "category": "product_name", "name": "SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)", "product_id": "CSAFPID-0007" } } ], "category": "product_name", "name": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagBase", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "SIMATIC IPC DiagBase" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC IPC DiagMonitor", "product_id": "CSAFPID-0009" } } ], "category": "product_name", "name": "SIMATIC IPC DiagMonitor" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SIMATIC WinCC Runtime Advanced", "product_id": "CSAFPID-0010" } } ], "category": "product_name", "name": "SIMATIC WinCC Runtime Advanced" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2.4.8", "product": { "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)", "product_id": "CSAFPID-0011", "product_identification_helper": { "model_numbers": [ "6AG1543-1MX00-7XE0" ] } } } ], "category": "product_name", "name": "SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)" }, { "branches": [ { "category": "product_version_range", "name": "\u003cV2.4.8", "product": { "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)", "product_id": "CSAFPID-0012", "product_identification_helper": { "model_numbers": [ "6GK7543-1MX00-0XE0" ] } } } ], "category": "product_name", "name": "TIM 1531 IRC (6GK7543-1MX00-0XE0)" } ], "category": "vendor", "name": "Siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-28827", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-28827" }, { "cve": "CVE-2023-30755", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. \r\n\r\nThis could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-30755" }, { "cve": "CVE-2023-30756", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "summary", "text": "The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference.\r\n\r\nThis could allow a remote attacker with no privileges to cause a denial of service condition in the system.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] }, "remediations": [ { "category": "no_fix_planned", "details": "Currently no fix is planned", "product_ids": [ "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010" ] }, { "category": "vendor_fix", "details": "Update to V2.4.8 or later version", "product_ids": [ "CSAFPID-0011", "CSAFPID-0012" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109954889/" }, { "category": "vendor_fix", "details": "Update to V3.5.20 or later version", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006" ], "url": "https://support.industry.siemens.com/cs/ww/en/view/109972735/" }, { "category": "workaround", "details": "Disable the web server of the affected system", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0005", "CSAFPID-0006", "CSAFPID-0007", "CSAFPID-0008", "CSAFPID-0009", "CSAFPID-0010", "CSAFPID-0011", "CSAFPID-0012" ] } ], "title": "CVE-2023-30756" } ] }
gsd-2023-28827
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2023-28827", "id": "GSD-2023-28827" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-28827" ], "id": "GSD-2023-28827", "modified": "2023-12-13T01:20:47.538653Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2023-28827", "STATE": "RESERVED" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." } ] } } } }
ghsa-wh3c-3qmr-4ghp
Vulnerability from github
8.2 (High) - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers.
This could allow a remote attacker to cause a denial of service condition in the system.
{ "affected": [], "aliases": [ "CVE-2023-28827" ], "database_specific": { "cwe_ids": [ "CWE-476" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-09-10T10:15:05Z", "severity": "HIGH" }, "details": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \n\nThis could allow a remote attacker to cause a denial of service condition in the system.", "id": "GHSA-wh3c-3qmr-4ghp", "modified": "2024-09-10T12:30:37Z", "published": "2024-09-10T12:30:37Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28827" }, { "type": "WEB", "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "type": "CVSS_V4" } ] }
var-202409-0271
Vulnerability from variot
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers.
This could allow a remote attacker to cause a denial of service condition in the system. SIMATIC CP 1242 and CP 1243 related processors connect SIMATIC S7-1200 controllers to wide area networks (WANs). They offer integrated security features such as firewalls, virtual private networks (VPNs) and support for other data encryption protocols. SIMATIC HMI Panels are used for operator control and monitoring of machines and plants. SIMATIC IPC DiagBase diagnostics software allows early identification of any potential faults on SIMATIC industrial computers and helps to avoid or reduce system downtime. SIMATIC IPC DiagMonitor monitors, reports, visualizes and logs the system status of SIMATIC IPCs. It communicates with other systems and reacts when events occur. Communication processor (CP) modules SIMATIC TIM 3V-IE and TIM 4R-IE are designed to enable Ethernet or telecontrol communication for SIMATIC S7-300/S7-400 CPUs. SIMATIC WinCC Runtime Advanced is a visualization runtime platform for operator control and monitoring of machines and plants. SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices. SIPLUS devices use the same firmware as the products they are based on
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202409-0271", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "simatic ipc diagmonitor", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "simatic wincc runtime advanced", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "simatic ipc diagbase", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null }, { "model": "siplus tim irc", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1531\u003cv2.4.8" }, { "model": "tim irc", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1531\u003cv2.4.8" }, { "model": "simatic cp", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1242-7v2\u003cv3.5.20" }, { "model": "simatic cp", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1243-1\u003cv3.5.20" }, { "model": "simatic cp dnp3", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1243-1\u003cv3.5.20" }, { "model": "simatic cp iec", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1243-1\u003cv3.5.20" }, { "model": "simatic cp lte", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1243-7\u003cv3.5.20" }, { "model": "simatic cp irc", "scope": "eq", "trust": 0.6, "vendor": "siemens", "version": "1243-8\u003cv3.5.20" }, { "model": "simatic hmi comfort panels", "scope": null, "trust": 0.6, "vendor": "siemens", "version": null } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" } ] }, "cve": "CVE-2023-28827", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 5.4, "confidentialityImpact": "NONE", "exploitabilityScore": 4.9, "id": "CNVD-2024-38017", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "HIGH", "attackVector": "NETWORK", "author": "productcert@siemens.com", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "exploitabilityScore": 2.2, "id": "CVE-2023-28827", "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } ], "severity": [ { "author": "productcert@siemens.com", "id": "CVE-2023-28827", "trust": 1.0, "value": "High" }, { "author": "CNVD", "id": "CNVD-2024-38017", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" }, { "db": "NVD", "id": "CVE-2023-28827" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle certain requests, causing a timeout in the watchdog, which could lead to the clean up of pointers. \r\n\r\nThis could allow a remote attacker to cause a denial of service condition in the system. SIMATIC CP 1242 and CP 1243 related processors connect SIMATIC S7-1200 controllers to wide area networks (WANs). They offer integrated security features such as firewalls, virtual private networks (VPNs) and support for other data encryption protocols. SIMATIC HMI Panels are used for operator control and monitoring of machines and plants. SIMATIC IPC DiagBase diagnostics software allows early identification of any potential faults on SIMATIC industrial computers and helps to avoid or reduce system downtime. SIMATIC IPC DiagMonitor monitors, reports, visualizes and logs the system status of SIMATIC IPCs. It communicates with other systems and reacts when events occur. Communication processor (CP) modules SIMATIC TIM 3V-IE and TIM 4R-IE are designed to enable Ethernet or telecontrol communication for SIMATIC S7-300/S7-400 CPUs. SIMATIC WinCC Runtime Advanced is a visualization runtime platform for operator control and monitoring of machines and plants. SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE or other devices. SIPLUS devices use the same firmware as the products they are based on", "sources": [ { "db": "NVD", "id": "CVE-2023-28827" }, { "db": "CNVD", "id": "CNVD-2024-38017" } ], "trust": 1.44 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2023-28827", "trust": 1.6 }, { "db": "SIEMENS", "id": "SSA-423808", "trust": 1.6 }, { "db": "CNVD", "id": "CNVD-2024-38017", "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" }, { "db": "NVD", "id": "CVE-2023-28827" } ] }, "id": "VAR-202409-0271", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" } ], "trust": 1.364781105 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "ICS" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" } ] }, "last_update_date": "2024-09-13T23:28:46.324000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Patch for Siemens Industrial Products Null Pointer Dereference Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/590301" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-476", "trust": 1.0 } ], "sources": [ { "db": "NVD", "id": "CVE-2023-28827" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" }, { "db": "NVD", "id": "CVE-2023-28827" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2024-38017" }, { "db": "NVD", "id": "CVE-2023-28827" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2024-09-12T00:00:00", "db": "CNVD", "id": "CNVD-2024-38017" }, { "date": "2024-09-10T10:15:05.347000", "db": "NVD", "id": "CVE-2023-28827" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2024-09-12T00:00:00", "db": "CNVD", "id": "CNVD-2024-38017" }, { "date": "2024-09-10T12:09:50.377000", "db": "NVD", "id": "CVE-2023-28827" } ] }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Siemens Industrial Products Null Pointer Dereference Vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2024-38017" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.