SSA-784849 — SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices

Summary

Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks.

Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 2

Medium 6.7

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 …

Siemens SIMATIC CP 1604 SIMATIC CP 1616 SIMATIC CP 1626 ICS / OT

Oct 10, 2023
Medium 4.4

CVE-2023-37195

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 …

Siemens SIMATIC CP 1604 SIMATIC CP 1616 SIMATIC CP 1626 ICS / OT

Oct 10, 2023

Revision history

2023-10-10 #1
Publication Date

References

SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-784849.html
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-784849.pdf
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-784849.txt