CVE-2023-30756
Description
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle certain errors when using the Expect HTTP request header, resulting in NULL dereference. This could allow a remote attacker with no privileges to cause a denial of service condition in the system.
How to fix
- Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)V3.5.20 or later
- Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants)V3.5.20 or later
- Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)V3.5.20 or later
- Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)V3.5.20 or later
- Siemens SIMATIC CP 1243-7 LTEV3.5.20 or later
- Siemens SIMATIC CP 1243-8 IRCV3.5.20 or later
- Siemens SIPLUS TIM 1531 IRCV2.4.8 or later
- Siemens TIM 1531 IRCV2.4.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC CP 1243-7 LTE | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC CP 1243-8 IRC | v < V3.5.20 | V3.5.20 |
| Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants) | No range specified | — |
| Siemens SIMATIC IPC DiagBase | 0 | — |
| Siemens SIMATIC IPC DiagMonitor | No range specified | — |
| Siemens SIMATIC WinCC Runtime Advanced | No range specified | — |
| Siemens SIPLUS TIM 1531 IRC | v < V2.4.8 | V2.4.8 |
| Siemens TIM 1531 IRC | v < V2.4.8 | V2.4.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.