VulnerabilityModified

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions).

MEDIUM 6.7EPSS 0.18%

Does this matter?

Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.

CVSS 3.1: 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.18% probability · 8th percentile
CISA KEV: Not listed
Weakness: CWE-284
Affected: siemens/simatic cp 1604 firmware · siemens/simatic cp 1616 firmware · siemens/simatic cp 1623 firmware · siemens/simatic cp 1626 firmware · siemens/simatic cp 1628 firmware
Source: productcert@siemens.com

References

https://cert-portal.siemens.com/productcert/pdf/ssa-784849.pdfVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-784849.pdfVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.