PT-2024-13968 · Siemens · Siplus Tim 1531 Irc+6
Published
2024-06-11
·
Updated
2024-06-11
·
CVE-2023-50763
CVSS v3.1
4.9
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
SIMATIC CP 1542SP-1 versions prior to V2.3
SIMATIC CP 1542SP-1 IRC versions prior to V2.3
SIMATIC CP 1543SP-1 versions prior to V2.3
SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL versions prior to V2.3
SIPLUS ET 200SP CP 1543SP-1 ISEC versions prior to V2.3
SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL versions prior to V2.3
SIPLUS TIM 1531 IRC versions prior to V2.4.8
TIM 1531 IRC versions prior to V2.4.8
Description
A vulnerability has been identified that could allow an authenticated remote attacker to create a denial of service condition. This occurs when the web server of affected products, configured to allow the import of PKCS12 containers, processes incomplete certificate chains, potentially ending up in an infinite loop.
Recommendations
For SIMATIC CP 1542SP-1 versions prior to V2.3, update to version V2.3 or later.
For SIMATIC CP 1542SP-1 IRC versions prior to V2.3, update to version V2.3 or later.
For SIMATIC CP 1543SP-1 versions prior to V2.3, update to version V2.3 or later.
For SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL versions prior to V2.3, update to version V2.3 or later.
For SIPLUS ET 200SP CP 1543SP-1 ISEC versions prior to V2.3, update to version V2.3 or later.
For SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL versions prior to V2.3, update to version V2.3 or later.
For SIPLUS TIM 1531 IRC versions prior to V2.4.8, update to version V2.4.8 or later.
For TIM 1531 IRC versions prior to V2.4.8, update to version V2.4.8 or later.
Fix
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Simatic Cp 1542Sp-1 Irc
Simatic Cp 1543Sp-1
Siplus Et 200Sp Cp 1542Sp-1 Irc Tx Rail
Siplus Et 200Sp Cp 1543Sp-1 Isec
Siplus Et 200Sp Cp 1543Sp-1 Isec Tx Rail
Siplus Tim 1531 Irc
Tim 1531 Irc