CVE-2023-35920

🗓️ 11 Jul 2023 09:07:08Reported by siemensType

Vulnerability in SIMATIC MV540/550/560 (All versions < V3.3.4), allowing remote Do

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-35920	11 Jul 202314:29	–	circl
CNNVD	Siemens SIMATIC 多款产品安全漏洞	11 Jul 202300:00	–	cnnvd
CNVD	Siemens SIMATIC MV500 Devices Uncontrolled Resource Consumption Vulnerability	12 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-35920	11 Jul 202309:07	–	cvelist
EUVD	EUVD-2023-39911	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	11 Jul 202300:00	–	ncsc
NVD	CVE-2023-35920	11 Jul 202310:15	–	nvd
OSV	CVE-2023-35920	11 Jul 202310:15	–	osv
Prion	Design/Logic Flaw	11 Jul 202310:15	–	prion
Positive Technologies	PT-2023-4033 · Siemens · Simatic Mv540 S +2	20 Jun 202300:00	–	ptsecurity

NVD

Node

siemens simatic_mv540_h_firmwareRange<3.3.4

AND

siemens simatic_mv540_hMatch-

Node

siemens simatic_mv540_s_firmwareRange<3.3.4

AND

siemens simatic_mv540_sMatch-

Node

siemens simatic_mv550_h_firmwareRange<3.3.4

AND

siemens simatic_mv550_hMatch-

Node

siemens simatic_mv550_s_firmwareRange<3.3.4

AND

siemens simatic_mv550_sMatch-

Node

siemens simatic_mv560_u_firmwareRange<3.3.4

AND

siemens simatic_mv560_uMatch-

Node

siemens simatic_mv560_x_firmwareRange<3.3.4

AND

siemens simatic_mv560_xMatch-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 U",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 X",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf

21 Nov 2024 08:08Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.01082

SSVC

CWE-400