CVE-2023-43775
Medium
Description
Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.
SeverityMedium
CVSS4.7
Exploit probability—
ProductEaton Smp Sg-4260 Firmware
PublishedSep 27, 2023
First seenSep 27, 2023
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- eaton smp_sg-4260_firmware8.0r9, 8.1r5, 8.2r4 or later
- eaton smp_sg-4250_firmware8.0r9, 8.1r5, 8.2r4 or later
- eaton smp_4\/dp_firmware8.0r9, 8.1r5, 8.2r4 or later
- eaton smp_16_firmware8.0r9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eaton smp_sg-4260_firmware | 8.0 ≤ v < 8.0r9, 8.1 ≤ v < 8.1r5, 8.2 ≤ v < 8.2r4 | 8.0r9, 8.1r5, 8.2r4 |
| eaton smp_sg-4250_firmware | 8.0 ≤ v < 8.0r9, 8.1 ≤ v < 8.1r5, 8.2 ≤ v < 8.2r4, 7.0, 7.1, 7.2 | 8.0r9, 8.1r5, 8.2r4 |
| eaton smp_4\/dp_firmware | 8.0 ≤ v < 8.0r9, 8.1 ≤ v < 8.1r5, 8.2 ≤ v < 8.2r4, 6.3, 7.0, 7.1, 7.2 | 8.0r9, 8.1r5, 8.2r4 |
| eaton smp_16_firmware | 8.0 ≤ v < 8.0r9, 6.3, 7.0, 7.1, 7.2 | 8.0r9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.