CVE-2023-37194

🗓️ 10 Oct 2023 10:21:22Reported by siemensType

Vulnerability in SIMATIC CP 1604, 1616, 1623, 1626, 162

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-37194	10 Oct 202314:30	–	circl
CNNVD	Siemens SIMATIC 多款产品访问控制错误漏洞	10 Oct 202300:00	–	cnnvd
CNVD	Siemens SIMATIC CP Device Improper Access Control Vulnerability	11 Oct 202300:00	–	cnvd
Cvelist	CVE-2023-37194	10 Oct 202310:21	–	cvelist
EUVD	EUVD-2023-41114	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC CP products	10 Oct 202300:00	–	ics
NVD	CVE-2023-37194	10 Oct 202311:15	–	nvd
Prion	Design/Logic Flaw	10 Oct 202311:15	–	prion
Positive Technologies	PT-2023-6260 · Siemens · Simatic Cp 1623 +4	10 Oct 202300:00	–	ptsecurity
Tenable Nessus	Siemens SIMATIC CP products Improper Access Control (CVE-2023-37194)	20 Feb 202400:00	–	nessus

NVD

Node

siemens simatic_cp_1604_firmwareMatch-

AND

siemens simatic_cp_1604Match-

Node

siemens simatic_cp_1616_firmwareMatch-

AND

siemens simatic_cp_1616Match-

Node

siemens simatic_cp_1623_firmwareMatch-

AND

siemens simatic_cp_1623Match-

Node

siemens simatic_cp_1626_firmwareMatch-

AND

siemens simatic_cp_1626Match-

Node

siemens simatic_cp_1628_firmwareMatch-

AND

siemens simatic_cp_1628Match-

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1604",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1616",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1623",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1626",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC CP 1628",
    "versions": [
      {
        "version": "All versions",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-784849.pdf

21 Nov 2024 08:11Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

EPSS0.00018

SSVC

CWE-284

cve-2023-37194 simatic cp vulnerability dma administrative privileges arbitrary code