PT-2024-9466 · Siemens · Sentron Powercenter 1000/1100

Published 2024-10-11 · Updated 2024-12-10 · CVE-2024-6657

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Sentron Powercenter 1000/1100 (affected versions not specified)

Description: A denial of service issue may occur in a BLE network when multiple central devices continuously connect and disconnect to a peripheral device, requiring a hard reset to recover. The vulnerability is related to synchronization errors in the BLE component of the Sentron Powercenter 1000/1100 microprogrammed software for monitoring and controlling energy systems. An attacker could exploit this issue to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-821

Related Identifiers

BDU:2024-11166

CVE-2024-6657

Affected Products

Sentron Powercenter 1000/1100

References · 7

• https://bdu.fstec.ru/vul/2024-11166 · Security Note
• https://community.silabs.com/068Vm00000FfVNN · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6657 · Security Note
• https://t.me/cvenotify/97875 · Telegram Post
• https://t.me/cvedetector/7679 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-347-10 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-620799.html · Note