Assigner | siemens |
Reserved | 2023-09-28 |
Published | 2023-11-14 |
Updated | 2024-06-11 |
Description
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C | |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Problem types
CWE-400: Uncontrolled Resource Consumption
Product status
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
Any version before *
References
https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
https://cert-portal.siemens.com/productcert/html/ssa-699386.html
https://cert-portal.siemens.com/productcert/html/ssa-180704.html
https://cert-portal.siemens.com/productcert/html/ssa-602936.html
https://cert-portal.siemens.com/productcert/html/ssa-353002.html