simatic_mv540_h_firmware 安全漏洞 (CVE-2023-36521)

admin

0
文章

0
评论

2023-11-29 22:41:59 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

simatic_mv540_h_firmware 安全漏洞 (CVE-2023-36521)

CVE编号

CVE-2023-36521

利用情况

暂无

补丁情况

N/A

披露时间

2023-07-11

漏洞描述

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all socket-based communication of the affected products if the result server is enabled.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	系统	siemens	simatic_mv540_h_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	系统	siemens	simatic_mv540_s_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	系统	siemens	simatic_mv550_h_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	系统	siemens	simatic_mv550_s_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	系统	siemens	simatic_mv560_u_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	系统	siemens	simatic_mv560_x_firmware	*		Up to (excluding) 3.3.4
	运行在以下环境
	硬件	siemens	simatic_mv540_h	-	-
	运行在以下环境
	硬件	siemens	simatic_mv540_s	-	-
	运行在以下环境
	硬件	siemens	simatic_mv550_h	-	-
	运行在以下环境
	硬件	siemens	simatic_mv550_s	-	-
	运行在以下环境
	硬件	siemens	simatic_mv560_u	-	-
	运行在以下环境
	硬件	siemens	simatic_mv560_x	-	-