var-202312-0259
Vulnerability from variot

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations. SIMATIC Drive Controller CPU 1504D TF firmware, SIMATIC Drive Controller CPU 1507D TF firmware, simatic et 200sp open control 1515sp pc2 Multiple Siemens products, including firmware, contain vulnerabilities related to the use of freed memory.Service operation interruption (DoS) It may be in a state. SINUMERIK MC is a CNC system for customized machine solutions. SINUMERIK ONE is a digitally native CNC system

Show details on source website


{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202312-0259",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "simatic s7-1500 cpu 1513r-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1510sp f-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1514sp-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1515f-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic et 200sp open control 1515sp pc2",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 et 200pro\\: cpu 1516pro f-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 et 200pro\\: cpu 1513pro-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "siplus s7-1500 cpu 1515f-2 pn t2 rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1515r-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1517tf-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 et 200pro\\: cpu 1513pro f-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-plcsim advanced",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "6.0"
      },
      {
        "model": "siplus s7-1500 cpu 1516-3 pn\\/dp",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1516t-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 et 200pro\\:cpu 1516pro-2 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1516-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus et 200sp cpu 1512sp-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus et 200sp cpu 1510sp f-1 pn rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1516-3 pn\\/dp tx rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1516f-3 pn\\/dp rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "sinumerik one",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus et 200sp cpu 1510sp f-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1515tf-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus et 200sp cpu 1510sp-1 pn rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1511f-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1518-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu s7-1518-4 pn\\/dp odk",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1518t-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1510sp-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1513-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1514spt f-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus et 200sp cpu 1512sp-1 pn rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1518f-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1515t-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1512sp f-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1516f-3 pn\\/dp",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1515f-2 pn rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1518-4 pn\\/dp mfp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1511tf-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1517f-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1518hf-4 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1511c-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1517h-3 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1515r-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1511f-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1511-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1518tf-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1514spt-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1517t-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic drive controller cpu 1507d tf",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu s7-1518f-4 pn\\/dp odk",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1511-1 pn tx rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1513-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1515r-2 pn tx rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1518-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1515f-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1516f-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus et 200sp cpu 1510sp-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1511-1 pn t1 rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus et 200sp 1512sp f-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "siplus s7-1500 cpu 1513f-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1512sp-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1511t-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic drive controller cpu 1504d tf",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "sinumerik mc",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1512c-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus s7-1500 cpu 1511-1 pn",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1515-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1513f-1 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1517-3 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1517h-3 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1518f-4 pn\\/dp",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "siplus et 200sp cpu 1512sp f-1 pn rail",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "*"
      },
      {
        "model": "simatic s7-1500 cpu 1514sp f-2 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 cpu 1518hf-4 pn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "siemens",
        "version": "3.1.0"
      },
      {
        "model": "simatic s7-1500 software controller",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1514sp f-2 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1514spt f-2 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1511-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic et 200sp open control 1515sp pc2",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1512c-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1514sp-2 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1511c-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7 1500 cpu 1513-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1513f-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1512sp-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1511tf-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1510sp f-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1512sp f-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1511f-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1510sp-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1514spt-2 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1513r-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic s7-1500 cpu 1511t-1 pn",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic drive controller cpu 1504d tf",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "simatic drive controller cpu 1507d tf",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30b7\u30fc\u30e1\u30f3\u30b9",
        "version": null
      },
      {
        "model": "sinumerik one",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      },
      {
        "model": "sinumerik mc",
        "scope": null,
        "trust": 0.6,
        "vendor": "siemens",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "cve": "CVE-2023-46156",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.8,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2023-97274",
            "impactScore": 6.9,
            "integrityImpact": "NONE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "productcert@siemens.com",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2023-46156",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "OTHER",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "JVNDB-2023-019859",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "productcert@siemens.com",
            "id": "CVE-2023-46156",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "OTHER",
            "id": "JVNDB-2023-019859",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2023-97274",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Affected devices improperly handle specially crafted packets sent to port 102/tcp. \r\nThis could allow an attacker to create a denial of service condition. A restart is needed to restore\r\nnormal operations. SIMATIC Drive Controller CPU 1504D TF firmware, SIMATIC Drive Controller CPU 1507D TF firmware, simatic et 200sp open control 1515sp pc2 Multiple Siemens products, including firmware, contain vulnerabilities related to the use of freed memory.Service operation interruption (DoS) It may be in a state. SINUMERIK MC is a CNC system for customized machine solutions. SINUMERIK ONE is a digitally native CNC system",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2023-46156",
        "trust": 3.2
      },
      {
        "db": "SIEMENS",
        "id": "SSA-280603",
        "trust": 2.4
      },
      {
        "db": "SIEMENS",
        "id": "SSA-592380",
        "trust": 1.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-23-348-11",
        "trust": 0.8
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-23-348-09",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU98271228",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "id": "VAR-202312-0259",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      }
    ],
    "trust": 1.2340367349999999
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      }
    ]
  },
  "last_update_date": "2024-08-14T13:12:12.052000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Patch for Siemens SINUMERIK ONE and SINUMERIK-MC Denial of Service Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/500406"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-416",
        "trust": 1.0
      },
      {
        "problemtype": "Use of freed memory (CWE-416) [ others ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-280603.pdf"
      },
      {
        "trust": 1.8,
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-592380.pdf"
      },
      {
        "trust": 1.6,
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-280603.html"
      },
      {
        "trust": 1.0,
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-592380.html"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu98271228/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2023-46156"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-09"
      },
      {
        "trust": 0.8,
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-11"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-12-14T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "date": "2024-01-15T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "date": "2023-12-12T12:15:13.417000",
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-12-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2023-97274"
      },
      {
        "date": "2024-01-15T05:11:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      },
      {
        "date": "2024-03-12T11:15:47.740000",
        "db": "NVD",
        "id": "CVE-2023-46156"
      }
    ]
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Use of Freed Memory Vulnerability in Multiple Siemens Products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-019859"
      }
    ],
    "trust": 0.8
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.