Siemens Industrial Products

🗓️ 11 Apr 2023 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 67 Views

CISA will no longer update ICS security advisories for Siemens Industrial Products. Vulnerabilities: Use After Free, Deadlock, Allocation of Resources. Exploitation may cause denial-of-service condition

Reporter	Title	Published	Views	Family All 41
BDU FSTEC	The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.	18 Sep 202400:00	–	bdu_fstec
Circl	CVE-2022-43716	11 Apr 202314:23	–	circl
Circl	CVE-2022-43767	11 Apr 202314:23	–	circl
Circl	CVE-2022-43768	11 Apr 202314:23	–	circl
CNNVD	Siemens SIMATIC CP443-1 OPC UA9 安全漏洞	11 Apr 202300:00	–	cnnvd
CNNVD	Siemens SIMATIC CP443-1 OPC UA9 资源管理错误漏洞	11 Apr 202300:00	–	cnnvd
CNNVD	Siemens SIMATIC CP443-1 OPC UA9 安全漏洞	11 Apr 202300:00	–	cnnvd
CNVD	Denial of Service Vulnerability in Multiple Siemens Products (CNVD-2023-35756)	16 Apr 202300:00	–	cnvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-566905.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-566905.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-103-10.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-103-10
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

11 Apr 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.5

EPSS0.00645

SSVC