CVE-2023-44321

Katalog CVE

CVSS 6.5 · Medium EPSS 1,0%

Kerentanan Uncontrolled Resource Consumption pada siemens 6gk5205-3bb00-2ab2 firmware, siemens 6gk5205-3bb00-2tb2 firmware +58 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Rincian

Terbit di NVD

14 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 61,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 71 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf advisory vendor
• https://cert-portal.siemens.com/productcert/html/ssa-087301.html
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html
• https://cert-portal.siemens.com/productcert/html/ssa-353002.html
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf