CVE-2023-36521

🗓️ 11 Jul 2023 09:07:13Reported by siemensType

Vulnerability in SIMATIC MV540/550/560 (All versions < V3.3.4) may cause denial of service

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers allows a perpetrator to cause a service failure.	2 Aug 202300:00	–	bdu_fstec
CNNVD	Siemens SIMATIC 安全漏洞	11 Jul 202300:00	–	cnnvd
CNVD	Siemens SIMATIC MV500 Devices Uncontrolled Resource Consumption Vulnerability (CNVD-2023-56540)	12 Jul 202300:00	–	cnvd
Cvelist	CVE-2023-36521	11 Jul 202309:07	–	cvelist
EUVD	EUVD-2023-40470	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	11 Jul 202300:00	–	ncsc
NVD	CVE-2023-36521	11 Jul 202310:15	–	nvd
OSV	CVE-2023-36521	11 Jul 202310:15	–	osv
Prion	Code injection	11 Jul 202310:15	–	prion
Positive Technologies	PT-2023-4039 · Siemens · Simatic Mv540 S +2	22 Jun 202300:00	–	ptsecurity

NVD

Node

siemens simatic_mv540_h_firmwareRange<3.3.4

AND

siemens simatic_mv540_hMatch-

Node

siemens simatic_mv540_s_firmwareRange<3.3.4

AND

siemens simatic_mv540_sMatch-

Node

siemens simatic_mv550_h_firmwareRange<3.3.4

AND

siemens simatic_mv550_hMatch-

Node

siemens simatic_mv550_s_firmwareRange<3.3.4

AND

siemens simatic_mv550_sMatch-

Node

siemens simatic_mv560_u_firmwareRange<3.3.4

AND

siemens simatic_mv560_uMatch-

Node

siemens simatic_mv560_x_firmwareRange<3.3.4

AND

siemens simatic_mv560_xMatch-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV540 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 H",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV550 S",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 U",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC MV560 X",
    "versions": [
      {
        "version": "All versions < V3.3.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf

21 Nov 2024 08:09Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5 - 8.6

EPSS0.00291

SSVC

CWE-770