Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistSiemensCVELIST:CVE-2023-28766
HistoryApr 11, 2023 - 9:03 a.m.

CVE-2023-28766

2023-04-1109:03:05
CWE-476
siemens
www.cve.org
3
siprotec
cve-2023-28766
denial of service
web service
validation

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON

A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA82 (CP100) (All versions), SIPROTEC 5 7SA82 (CP150) (All versions < V9.40), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD82 (CP100) (All versions), SIPROTEC 5 7SD82 (CP150) (All versions < V9.40), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ81 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ81 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ82 (CP100) (All versions < V8.89), SIPROTEC 5 7SJ82 (CP150) (All versions < V9.40), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SK82 (CP100) (All versions < V8.89), SIPROTEC 5 7SK82 (CP150) (All versions < V9.40), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL82 (CP100) (All versions), SIPROTEC 5 7SL82 (CP150) (All versions < V9.40), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V9.64), SIPROTEC 5 7ST86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7SX82 (CP150) (All versions < V9.40), SIPROTEC 5 7SX85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT82 (CP100) (All versions), SIPROTEC 5 7UT82 (CP150) (All versions < V9.40), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 7VU85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BA-2EL (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V9.40 installed on CP150 and CP300 devices), SIPROTEC 5 Communication Module ETH-BB-2FO (All versions < V8.89 installed on CP100 devices), SIPROTEC 5 Communication Module ETH-BD-2FO (All versions < V9.40), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V9.40). Affected devices lack proper validation of http request parameters of the hosted web service.
An unauthenticated remote attacker could send specially crafted packets that could cause denial of service condition of the target device.

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MD89 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.64",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 6MU85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7KE85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SA87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SD87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ81 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ81 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SJ86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SK85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SL87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SS85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7ST85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.64",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7ST86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SX82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7SX85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UM85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT82 (CP100)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT82 (CP150)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT86 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7UT87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VE85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VK87 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 7VU85 (CP300)",
    "versions": [
      {
        "status": "affected",
        "version": "V7.80",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BA-2EL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BA-2EL",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BB-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BB-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V8.89",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Communication Module ETH-BD-2FO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIPROTEC 5 Compact 7SX800 (CP050)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.40",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Related

cve 1
nvd 1
nessus 1
ics 1
prion 1
cve
cve
CVE-2023-28766
2023-04-11 10:15:18
nvd
nvd
CVE-2023-28766
2023-04-11 10:15:18
nessus
nessus
Siemens SIPROTEC 5 Devices Null Pointer Dereference (CVE-2023-28766)
2023-05-16 00:00:00
ics
ics
Siemens SIPROTEC 5 Devices
2023-04-13 12:00:00
prion
prion
Design/Logic Flaw
2023-04-11 10:15:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

56.9%

JSON
Related for CVELIST:CVE-2023-28766
cve1nvd1nessus1ics1prion1