CVE-2023-51440

CVSS V2 None CVSS V3 None

Description

A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All versions), SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0) (All versions), SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0) (All versions). Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets.

Overview

CVE ID
CVE-2023-51440

Assigner
siemens

Vulnerability Status
PUBLISHED

Published Version
2024-02-13T09:00:04.702Z

Last Modified Date
2024-06-04T17:20:22.538Z

Weakness Enumerations

CWE	URL
CWE-940	http://cwe.mitre.org/data/definitions/940.html

References

Reference URL	Reference Tags
https://cert-portal.siemens.com/productcert/html/ssa-516818.html

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-51440
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51440

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 18:36:06				Added to TrackCVE