Siemens SIMATIC PCS 安全漏洞

SIMATIC PCS neo is a distributed control system DCS. Siemens SIMATIC PCS neo has a SQL injection vulnerability that can be exploited by an attacker to execute SQL statements in the underlying database...

Siemens SIMATIC PCS neo

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC MV500

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2023-6999 · Siemens · Simatic Pcs Neo

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Description: A vulnerability has been identified in the PUD Manager of SIMATIC PCS neo, where it does not properly neutralize user-provided inputs. This could allow an authenticated adjacent attacker to...

Siemens SIMATIC PCS 安全漏洞

SIMATIC PCS neo is a distributed control system DCS. A cross-site scripting vulnerability exists in Siemens SIMATIC PCS neo, which can be exploited by an attacker to inject Javascript code into an application...

The vulnerability of MICROprogramming software for communication modules of SIMATIC CP, related to access control deficiencies, allows a intruder to execute arbitrary code.

The vulnerability of MICROprogramming software for communication modules of SIMATIC CP is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to execute arbitrary code...

The vulnerability of SIMATIC CP communication module software, related to insufficient access control for DMA memory, allows a intruder to cause a service failure.

The vulnerability of the microprogramming software for SIMATIC CP communication modules is related to insufficient access control for DMA memory. Exploiting this vulnerability could allow an intruder to cause a service failure...

Siemens SIMATIC CP Device Improper Access Control Vulnerability

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices suffer from an Improper Access Control...

Siemens SIMATIC CP Device Uncontrolled Resource Consumption Vulnerability

The SIMATIC CP 1623, CP 1626 and CP 1628 are PCI express cards for connection to industrial Ethernet. the SIMATIC CP 1604 and CP 1616 are PCI/PCI-104 cards for the connection of field devices to PROFINET industrial Ethernet. The Siemens SIMATIC CP devices are vulnerable to an uncontrolled resourc...

CVE-2023-37195

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

Design/Logic Flaw

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...

CVE-2023-37195

The CVE-2023-37195 entry concerns Siemens SIMATIC CP devices (CP 1604, CP 1616, CP 1623, CP 1626, CP 1628). Description: DMA mapping is not sufficiently controlled, allowing a local attacker with administrative privileges to cause a denial-of-service on the host, recoverable only after a physical...

CVE-2023-37195

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...

CVE-2023-37195

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

CVE-2023-37194

Summary: CVE-2023-37194 affects Siemens SIMATIC CP family PCI/PCI-104/PCIe cards (CP 1604, 1616, 1623, 1626, 1628). The root cause is improper access control: kernel memory is exposed to user-mode via Direct Memory Access (DMA), enabling a local attacker with administrative privileges to execute ...

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

PT-2023-6080 · Siemens · Simatic Cp 1628 +4

Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1604 versions all SIMATIC CP 1616 versions all SIMATIC CP 1623 versions all SIMATIC CP 1626 versions all SIMATIC CP 1628 versions all Description: The issue is related to insufficient control of access to memory DMA, which could...