PT-2025-6188 · Siemens · Simatic Drive Controller Cpu 1504D Tf+39

David Henrique Estevam De Andrade

·

Published

2025-02-11

·

Updated

2025-02-11

·

CVE-2023-37482

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Web server (affected versions not specified)
Description: The login functionality of the web server does not normalize the response times of login attempts, allowing an unauthenticated remote attacker to exploit this side-channel information to distinguish between valid and invalid usernames.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2023-37482

Affected Products

Simatic Drive Controller Cpu 1504D Tf
Simatic Drive Controller Cpu 1507D Tf
Simatic Et 200Sp Cpu 1510Sp-1 Pn
Simatic Et 200Sp Cpu 1512Sp-1 Pn
Simatic Et 200Sp Cpu 1514Sp-2 Pn
Simatic Et 200Sp Open Controller Cpu 1515Sp Pc2
Simatic S7-1200 Cpu 1211C Ac/Dc/Rly
Simatic S7-1200 Cpu 1211C Dc/Dc/Dc
Simatic S7-1200 Cpu 1212C Ac/Dc/Rly
Simatic S7-1200 Cpu 1212C Dc/Dc/Dc
Simatic S7-1200 Cpu 1214C Ac/Dc/Rly
Simatic S7-1200 Cpu 1214C Dc/Dc/Dc
Simatic S7-1200 Cpu 1215C Ac/Dc/Rly
Simatic S7-1200 Cpu 1215C Dc/Dc/Dc
Simatic S7-1200 Cpu 1217C Dc/Dc/Dc
Simatic S7-1500 Cpu 1510Sp F-1 Pn
Simatic S7-1500 Cpu 1511Tf-1 Pn
Simatic S7-1500 Cpu 1512Sp F-1 Pn
Simatic S7-1500 Cpu 1513F-1 Pn
Simatic S7-1500 Cpu 1513Pro-2 Pn
Simatic S7-1500 Cpu 1514Sp-2 Pn
Simatic S7-1500 Cpu 1515Tf-2 Pn
Simatic S7-1500 Cpu 1516Tf-3 Pn/Dp
Simatic S7-1500 Cpu 1516Pro-2 Pn
Simatic S7-1500 Cpu 1517T-3 Pn/Dp
Simatic S7-1500 Cpu 1517Tf-3 Pn/Dp
Simatic S7-1500 Cpu 1518Tf-4 Pn/Dp
Simatic S7-1500 Software Controller
Simatic S7-1500 Software Controller Cpu 1507S F V3
Simatic S7-1500 Software Controller Cpu 1508S F V3
Simatic S7-1500 Software Controller Linux V3
Simatic S7-Plcsim Advanced
Siplus S7-1200 Cpu 1212 Ac/Dc/Rly
Siplus S7-1200 Cpu 1212C Dc/Dc/Dc
Siplus S7-1200 Cpu 1214 Ac/Dc/Rly
Siplus S7-1200 Cpu 1214C Dc/Dc/Dc Rail
Siplus S7-1200 Cpu 1215 Ac/Dc/Rly
Siplus S7-1200 Cpu 1215C Dc/Dc/Dc
Siplus S7-1500 Cpu 1517H-3 Pn
Siplus S7-1500 Cpu 1518-4 Pn/Dp