Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveSiemensCVE-2022-43768
HistoryApr 11, 2023 - 10:15 a.m.

CVE-2022-43768

2023-04-1110:15:17
CWE-770
siemens
web.nvd.nist.gov
38
cve-2022-43768
vulnerability
denial of service
simatic
siplus
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

45.9%

JSON

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Affected configurations

Nvd
Node
siemenssimatic_cp_1242-7_v2_firmware
AND
siemenssimatic_cp_1242-7_v2Match-
Node
siemenssimatic_cp_1243-1_firmware
AND
siemenssimatic_cp_1243-1Match-
Node
siemenssimatic_cp_1243-1_dnp3_firmware
AND
siemenssimatic_cp_1243-1_dnp3Match-
Node
siemenssimatic_cp_1243-1_iec_firmware
AND
siemenssimatic_cp_1243-1_iecMatch-
Node
siemenssimatic_cp_1243-7_lte_eu_firmware
AND
siemenssimatic_cp_1243-7_lte_euMatch-
Node
siemenssimatic_cp_1243-7_lte_us_firmware
AND
siemenssimatic_cp_1243-7_lte_usMatch-
Node
siemenssimatic_cp_1243-8_irc_firmware
AND
siemenssimatic_cp_1243-8_ircMatch-
Node
siemenssimatic_cp_1542sp-1_firmware
AND
siemenssimatic_cp_1542sp-1Match-
Node
siemenssimatic_cp_1542sp-1_irc_firmware
AND
siemenssimatic_cp_1542sp-1_ircMatch-
Node
siemenssimatic_cp_1543sp-1_firmware
AND
siemenssimatic_cp_1543sp-1Match-
Node
siemenssimatic_cp_443-1Match-
AND
siemenssimatic_cp_443-1_firmwareRange<3.3
Node
siemenssimatic_cp_443-1_advancedMatch-
AND
siemenssimatic_cp_443-1_advanced_firmwareRange<3.3
Node
siemenssimatic_ipc_diagbaseMatch-
AND
siemenssimatic_ipc_diagbase_firmware
Node
siemenssimatic_ipc_diagmonitorMatch-
AND
siemenssimatic_ipc_diagmonitor_firmware
Node
siemenssiplus_et_200sp_cp_1542sp-1_irc_tx_railMatch-
AND
siemenssiplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware
Node
siemenssiplus_et_200sp_cp_1543sp-1_isecMatch-
AND
siemenssiplus_et_200sp_cp_1543sp-1_isec_firmware
Node
siemenssiplus_et_200sp_cp_1543sp-1_isec_tx_railMatch-
AND
siemenssiplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware
Node
siemenssiplus_net_cp_1242-7_v2Match-
AND
siemenssiplus_net_cp_1242-7_v2_firmware
Node
siemenssiplus_net_cp_443-1_firmwareRange<3.3
AND
siemenssiplus_net_cp_443-1Match-
Node
siemenssiplus_net_cp_443-1_advanced_firmwareRange<3.3
AND
siemenssiplus_net_cp_443-1_advancedMatch-
Node
siemenssiplus_s7-1200_cp_1243-1_firmware
AND
siemenssiplus_s7-1200_cp_1243-1Match-
Node
siemenssiplus_s7-1200_cp_1243-1_rail_firmware
AND
siemenssiplus_s7-1200_cp_1243-1_railMatch-
Node
siemenssiplus_tim_1531_irc_firmwareRange<2.3.6
AND
siemenssiplus_tim_1531_ircMatch-
Node
siemenstim_1531_irc_firmwareRange<2.3.6
AND
siemenstim_1531_ircMatch-
VendorProductVersionCPE
siemenssimatic_cp_1242-7_v2_firmware*cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:*
siemenssimatic_cp_1242-7_v2-cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1_firmware*cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1-cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1_dnp3_firmware*cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1_dnp3-cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1_iec_firmware*cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:*
siemenssimatic_cp_1243-1_iec-cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*
siemenssimatic_cp_1243-7_lte_eu_firmware*cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*
siemenssimatic_cp_1243-7_lte_eu-cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 481

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1242-7 V2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-7 LTE EU",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-7 LTE US",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1243-8 IRC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1542SP-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1542SP-1 IRC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1543SP-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 443-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 443-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 443-1 Advanced",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS ET 200SP CP 1543SP-1 ISEC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS NET CP 1242-7 V2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS NET CP 443-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS NET CP 443-1 Advanced",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-1200 CP 1243-1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS S7-1200 CP 1243-1 RAIL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.4.29",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPLUS TIM 1531 IRC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3.6",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "TIM 1531 IRC",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.3.6",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Related

prion 1
cvelist 1
nessus 1
nvd 1
ics 1
prion
prion
Design/Logic Flaw
2023-04-11 10:15:00
cvelist
cvelist
CVE-2022-43768
2023-04-11 09:02:51
nessus
nessus
Siemens Industrial Products Allocation of Resources Without Limits or Throttling (CVE-2022-43768)
2023-05-02 00:00:00
nvd
nvd
CVE-2022-43768
2023-04-11 10:15:17
ics
ics
Siemens Industrial Products
2023-04-13 12:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

45.9%

JSON
Related for CVE-2022-43768
prion1cvelist1nessus1nvd1ics1