CVE-2023-36521
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability has been identified in SIMATIC MV540 H, MV540 S, MV550 H, MV550 S, MV560 U, and MV560 X products in versions below V3.3.4. The result synchronization server contains a vulnerability that may lead to a denial of service condition.
Risk Assessment
An attacker may cause a denial of service situation for all socket-based communication of the affected products if the result server is enabled.
Recommendation
It is recommended to update the affected products to version V3.3.4 or newer to mitigate the denial of service risk.
Other vulnerabilities in SIMATIC MV540 H, MV540 S, MV550 H, MV550 S, MV560 U, MV560 X (wszystkie wersje < V3.3.4)
See all- CVE-2023-35921High
A vulnerability has been identified in SIMATIC MV540 H, MV540 S, MV550 H, MV550 S, MV560 U, and MV560 X devices in versions below V3.3.4. These devices cannot properly process specially crafted Ethernet frames, which could allow an unauthenticated remote attacker to cause a denial of service condition.
- CVE-2023-35920High
A vulnerability has been identified in SIMATIC MV540 H, MV540 S, MV550 H, MV550 S, MV560 U, and MV560 X devices in versions below V3.3.4. These devices cannot properly process specially crafted IP packets, which could allow an unauthenticated remote attacker to cause a denial of service condition.
Original NVD description (English source)
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all socket-based communication of the affected products if the result server is enabled.