1. Home
  2. CVE Database
  3. CVE-2023-37194
MEDIUM · 6.7

CVE-2023-37194

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). T...

Vulnerability Description

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SiemensSimatic Cp 1604 Firmware-
SiemensSimatic Cp 1604-
SiemensSimatic Cp 1616 Firmware-
SiemensSimatic Cp 1616-
SiemensSimatic Cp 1623 Firmware-
SiemensSimatic Cp 1623-
SiemensSimatic Cp 1626 Firmware-
SiemensSimatic Cp 1626-
SiemensSimatic Cp 1628 Firmware-
SiemensSimatic Cp 1628-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2023-37194?

CVE-2023-37194 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). T...

How severe is CVE-2023-37194?

CVE-2023-37194 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-37194?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Cp 1604 Firmware, Siemens Simatic Cp 1604, Siemens Simatic Cp 1616 Firmware, Siemens Simatic Cp 1616, Siemens Simatic Cp 1623 Firmware.