VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2022/43xxx/CVE-2022-43768.json
T

424 lines
17 KiB
JSON
Raw Blame History

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2022-43768",
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"state": "PUBLISHED",
"assignerShortName": "siemens",
"dateReserved": "2022-10-26T11:27:16.347Z",
"datePublished": "2023-04-11T09:02:51.623Z",
"dateUpdated": "2025-02-07T16:51:07.850Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens",
"dateUpdated": "2024-09-10T09:33:34.861Z"
},
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product."
}
],
"affected": [
{
"vendor": "Siemens",
"product": "SIMATIC CP 1242-7 V2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-7 LTE EU",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-7 LTE US",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1243-8 IRC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1542SP-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1542SP-1 IRC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 1543SP-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIMATIC CP 443-1 Advanced",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP CP 1543SP-1 ISEC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS NET CP 1242-7 V2",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS NET CP 443-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS NET CP 443-1 Advanced",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS S7-1200 CP 1243-1",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS S7-1200 CP 1243-1 RAIL",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V3.4.29",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "SIPLUS TIM 1531 IRC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "TIM 1531 IRC",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.3.6",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
],
"metrics": [
{
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"baseScore": 7.5,
"baseSeverity": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html"
}
]
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-03T13:40:06.422Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-566905.pdf",
"tags": [
"x_transferred"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-139628.html",
"tags": [
"x_transferred"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-566905.html",
"tags": [
"x_transferred"
]
}
]
},
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2025-02-07T16:50:58.868618Z",
"id": "CVE-2022-43768",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-02-07T16:51:07.850Z"
}
}
]
}
}
View Git Blame Copy Permalink