CVE-2023-35920

🗓️ 11 Jul 2023 09:07:08Reported by siemensType

Vulnerability in SIMATIC MV540/550/560 (All versions < V3.3.4), allowing remote Do

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	SIMATIC MV540/MV550/MV560 Resource Consumption	2 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-35920	11 Jul 202314:29	–	circl
CNNVD	Siemens SIMATIC: Multiple products have security vulnerabilities	11 Jul 202300:00	–	cnnvd
CNVD	Siemens SIMATIC MV500 Devices Uncontrolled Resource Consumption Vulnerability	12 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-35920	11 Jul 202309:07	–	cvelist
EUVD	EUVD-2023-39911	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	11 Jul 202300:00	–	ncsc
NVD	CVE-2023-35920	11 Jul 202310:15	–	nvd
osv_cve	CVE-2023-35920	11 Jul 202310:15	–	osv_cve
Prion	Design/Logic Flaw	11 Jul 202310:15	–	prion

NVD

Vulners

Vulnrichment

Node

AND

siemens simatic_mv540_h_firmwareRange<3.3.4

siemens simatic_mv540_hMatch-

Node

AND

siemens simatic_mv540_s_firmwareRange<3.3.4

siemens simatic_mv540_sMatch-

Node

AND

siemens simatic_mv550_h_firmwareRange<3.3.4

siemens simatic_mv550_hMatch-

Node

AND

siemens simatic_mv550_s_firmwareRange<3.3.4

siemens simatic_mv550_sMatch-

Node

AND

siemens simatic_mv560_u_firmwareRange<3.3.4

siemens simatic_mv560_uMatch-

Node

AND

siemens simatic_mv560_x_firmwareRange<3.3.4

siemens simatic_mv560_xMatch-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 U",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 X",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf

23 Oct 2026 23:10Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00866

SSVC

CWE-400