CVE-2023-37194
First published: Tue Oct 10 2023(Updated: )
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.
Credit: productcert@siemens.com productcert@siemens.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Siemens Simatic Cp 1604 Firmware | ||
| Siemens Simatic Cp 1604 | ||
| Siemens Simatic Cp 1616 Firmware | ||
| Siemens Simatic Cp 1616 | ||
| Siemens Simatic Cp 1623 Firmware | ||
| Siemens Simatic Cp 1623 | ||
| Siemens Simatic Cp 1626 Firmware | ||
| Siemens Simatic Cp 1626 | ||
| Siemens Simatic Cp 1628 Firmware | ||
| Siemens Simatic Cp 1628 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-37194?
The severity of CVE-2023-37194 is medium with a severity value of 6.7.
Which software versions are affected by CVE-2023-37194?
SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions) are affected by CVE-2023-37194.
What is the vulnerability in CVE-2023-37194?
The vulnerability in CVE-2023-37194 is that the kernel memory of affected devices is exposed to user-mode via direct memory access (DMA).
How can I fix CVE-2023-37194?
Siemens has released a firmware update to fix CVE-2023-37194. Please refer to the Siemens product security advisory for more information.
- collector/nvd-api
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/siemens
- canonical/siemens simatic cp 1604 firmware
- canonical/siemens simatic cp 1604
- canonical/siemens simatic cp 1616 firmware
- canonical/siemens simatic cp 1616
- canonical/siemens simatic cp 1623 firmware
- canonical/siemens simatic cp 1623
- canonical/siemens simatic cp 1626 firmware
- canonical/siemens simatic cp 1626
- canonical/siemens simatic cp 1628 firmware
- canonical/siemens simatic cp 1628