Skip to content
OpenAdvisories
Medium SSA-423808 3 CVEs

SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products

Published Sep 10, 2024 · Updated Sep 10, 2024

Vendor: Siemens Product: SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) Product: SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) Product: SIMATIC CP 1243-7 LTE Product: SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Product: SIMATIC HMI Comfort Panels (incl. SIPLUS variants) Product: SIMATIC IPC DiagBase Product: SIMATIC IPC DiagMonitor Product: SIMATIC WinCC Runtime Advanced Product: SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) Product: TIM 1531 IRC (6GK7543-1MX00-0XE0)

Summary

Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 3

Revision history

  1. #1

    Publication Date

References