Siemens SIMATIC CP products Improper Access Control (CVE-2023-37194)

A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. The kernel memory of affected devices is exposed to user-mode via direct memory access DMA which could allow...

CVE-2023-37194

Summary: CVE-2023-37194 affects Siemens SIMATIC CP family PCI/PCI-104/PCIe cards (CP 1604, 1616, 1623, 1626, 1628). The root cause is improper access control: kernel memory is exposed to user-mode via Direct Memory Access (DMA), enabling a local attacker with administrative privileges to execute ...