1. Home
  2. CVE Database
  3. CVE-2023-37195
MEDIUM · 4.4

CVE-2023-37195

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). A...

Vulnerability Description

A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). Affected devices insufficiently control continuous mapping of direct memory access (DMA) requests. This could allow local attackers with administrative privileges to cause a denial of service situation on the host. A physical power cycle is required to get the system working again.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
SiemensSimatic Cp 1604 Firmware-
SiemensSimatic Cp 1604-
SiemensSimatic Cp 1616 Firmware-
SiemensSimatic Cp 1616-
SiemensSimatic Cp 1623 Firmware-
SiemensSimatic Cp 1623-
SiemensSimatic Cp 1626 Firmware-
SiemensSimatic Cp 1626-
SiemensSimatic Cp 1628 Firmware-
SiemensSimatic Cp 1628-

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2023-37195?

CVE-2023-37195 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). A...

How severe is CVE-2023-37195?

CVE-2023-37195 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-37195?

Check the references section above for vendor advisories and patch information. Affected products include: Siemens Simatic Cp 1604 Firmware, Siemens Simatic Cp 1604, Siemens Simatic Cp 1616 Firmware, Siemens Simatic Cp 1616, Siemens Simatic Cp 1623 Firmware.