PT-2023-6992 · Siemens · Scalance Xb205-3

Published

2023-11-14

·

Updated

2024-08-13

·

CVE-2023-44321

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SCALANCE XB205-3 (SC, PN) versions prior to V4.5 SCALANCE XB205-3 (ST, E/IP) versions prior to V4.5
Description The issue is related to the improper validation of input lengths during certain configuration changes in the web interface, allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again. This can be exploited by a remote attacker to cause a denial of service.
Recommendations For SCALANCE XB205-3 (SC, PN) versions prior to V4.5, update to version V4.5 or later to resolve the issue. For SCALANCE XB205-3 (ST, E/IP) versions prior to V4.5, update to version V4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Fix

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2023-08011
CVE-2023-44321

Affected Products

Scalance Xb205-3