Description
A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC CP 1543-1 V4.0 | V4.0.44 – < V4.0.50 | V4.0.50 |
Advisories 3
- ICSA-24-319-11 Siemens SIMATIC CP CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-654798 SSA-654798: Incorrect Authorization Vulnerability in SIMATIC CP 1543-1 Devices Siemens ProductCERT · Nov 12, 2024