CVE-2023-37194

🗓️ 10 Oct 2023 10:21:22Reported by siemensType

Vulnerability in SIMATIC CP 1604, 1616, 1623, 1626, 162

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of MICROprogramming software for communication modules of SIMATIC CP, related to access control deficiencies, allows a intruder to execute arbitrary code.	21 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-37194	10 Oct 202314:30	–	circl
CNNVD	Siemens SIMATIC 多款产品访问控制错误漏洞	10 Oct 202300:00	–	cnnvd
CNVD	Siemens SIMATIC CP Device Improper Access Control Vulnerability	11 Oct 202300:00	–	cnvd
Cvelist	CVE-2023-37194	10 Oct 202310:21	–	cvelist
EUVD	EUVD-2023-41114	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC CP products	10 Oct 202300:00	–	ics
NVD	CVE-2023-37194	10 Oct 202311:15	–	nvd
Prion	Design/Logic Flaw	10 Oct 202311:15	–	prion
Positive Technologies	PT-2023-6260 · Siemens · Simatic Cp 1623 +4	10 Oct 202300:00	–	ptsecurity

NVD

Node

siemens simatic_cp_1604_firmwareMatch-

AND

siemens simatic_cp_1604Match-

Node

siemens simatic_cp_1616_firmwareMatch-

AND

siemens simatic_cp_1616Match-

Node

siemens simatic_cp_1623_firmwareMatch-

AND

siemens simatic_cp_1623Match-

Node

siemens simatic_cp_1626_firmwareMatch-

AND

siemens simatic_cp_1626Match-

Node

siemens simatic_cp_1628_firmwareMatch-

AND

siemens simatic_cp_1628Match-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1604",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1616",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1623",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1626",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1628",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-784849.pdf

21 Nov 2024 08:11Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

EPSS0.00018

SSVC

CWE-284

cve-2023-37194 simatic cp vulnerability dma administrative privileges arbitrary code