CVE-2023-44319 | THREATINT

Assigner	siemens
Reserved	2023-09-28
Published	2023-11-14
Updated	2024-06-11

Description

Affected devices use a weak checksum algorithm to protect the configuration backup that an administrator can export from the device. This could allow an authenticated attacker with administrative privileges or an attacker that tricks a legitimate administrator to upload a modified configuration file to change the configuration of an affected device.

MEDIUM: 4.9

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C

Problem types

CWE-328: Use of Weak Hash

Product status

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V8.0

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before V3.1

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before *

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

Default status

unknown

Any version before V4.5

affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf

https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf

https://cert-portal.siemens.com/productcert/html/ssa-699386.html

https://cert-portal.siemens.com/productcert/html/ssa-180704.html

https://cert-portal.siemens.com/productcert/html/ssa-602936.html

https://cert-portal.siemens.com/productcert/html/ssa-690517.html

cve.org CVE-2023-44319

nvd.nist.gov CVE-2023-44319

Download JSON