PT-2023-28976 · Eaton · Eaton Smp Sg-4260+1

Published 2023-09-26 · Updated 2023-10-02 · CVE-2023-43775

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Eaton SMP Gateway (affected versions not specified) Eaton SMP SG-4260 (affected versions not specified)

Description A denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows an attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-43775

Affected Products

Eaton Smp Gateway

Eaton Smp Sg-4260

References · 5

• https://osv.dev/vulnerability/CVE-2023-43775 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43775 · Security Note
• https://eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2022-1008.pdf · Vendor Advisory
• https://twitter.com/CVEnew/status/1706673878360064163 · Twitter Post
• https://t.me/cibsecurity/71078 · Telegram Post