QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-43647

Back to search

CVE-2024-43647

Published: Sep 10, 2024

Modified: Sep 10, 2024

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

A vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ES7288-1CR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR20 (6ES7288-1SR20-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR30 (6ES7288-1SR30-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR40 (6ES7288-1SR40-0AA1) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA0) (All versions), SIMATIC S7-200 SMART CPU SR60 (6ES7288-1SR60-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST20 (6ES7288-1ST20-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST30 (6ES7288-1ST30-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST40 (6ES7288-1ST40-0AA1) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA0) (All versions), SIMATIC S7-200 SMART CPU ST60 (6ES7288-1ST60-0AA1) (All versions). Affected devices do not properly handle TCP packets with an incorrect structure. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the network cable of the device needs to be unplugged and re-plugged.

VendorProductVersions

Siemens

SIMATIC S7-200 SMART CPU CR40

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU CR60

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR20

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR20

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR30

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR30

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR40

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR40

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR60

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU SR60

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST20

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST20

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST30

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST30

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST40

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST40

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST60

affected
0 - < *

Siemens

SIMATIC S7-200 SMART CPU ST60

affected
0 - < *

Weaknesses (CWE)

CWE-400

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:T/RC:C

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now