Details of VAR-202308-0469

ID

VAR-202308-0469

CVE

CVE-2023-39269

TITLE

Siemens' RUGGEDCOM ROS Vulnerability in resource allocation without restrictions or throttling in

Trust: 0.8

sources: JVNDB: JVNDB-2023-021984

DESCRIPTION

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The web server of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause total loss of availability of the web server, which might recover after the attack is over. Siemens' RUGGEDCOM ROS Exists in a vulnerability in resource allocation without restrictions or throttling.Service operation interruption (DoS) It may be in a state. RUGGEDCOM Ethernet switches are designed to operate reliably in electrically harsh and climate demanding environments such as power substations and traffic control cabinets

Trust: 2.25

sources: NVD: CVE-2023-39269 // JVNDB: JVNDB-2023-021984 // CNVD: CNVD-2023-62040 // VULMON: CVE-2023-39269

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2023-62040

AFFECTED PRODUCTS

vendor:	siemens	model:	ruggedcom rsg2100	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rsg2100nc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900nc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900g	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom rs900gnc	scope:	lt	version:	4.3.8	Trust: 1.2
vendor:	siemens	model:	ruggedcom ros	scope:	eq	version:	*	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	lt	version:	4.3.8	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	gte	version:	5.0.0	Trust: 1.0
vendor:	siemens	model:	ruggedcom ros	scope:	gte	version:	4.0.0	Trust: 1.0
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	4.0.0 that's all 4.3.8	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	4.3.8	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom ros	scope:	eq	version:	5.0.0 that's all	Trust: 0.8
vendor:	siemens	model:	ruggedcom rsg2100nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2200nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2288nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300p	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000anc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000h	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000hnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000t	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000tnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg907r	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg908c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg909r	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg910c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920p	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg920pnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2100f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs920w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs930w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940g	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940gf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs940gnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs969	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs969nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600f	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600fnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600t	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs1600tnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs8000a	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gpf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gpnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-gets-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-gets-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-stnd-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900m-stnd-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-gets-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-gets-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-stnd-xx	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900mnc-stnd-xx-c01	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900w	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910l	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910lnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs910nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416p	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pnc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pnc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pv2	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416v2	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900g	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs900gp	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2300pnc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsg2488nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsl910	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rsl910nc	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst916c	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst916p	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst2228	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rst2228p	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416pf	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2100nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m2200nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc30	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc30nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rmc8388nc	scope:	eq	version:	5.*	Trust: 0.6
vendor:	siemens	model:	ruggedcom rp110	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rp110nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs400nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs401	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs401nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom rs416	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i800	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i800nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i801	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i801nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i802	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i802nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i803	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom i803nc	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969	scope:	lt	version:	4.3.8	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969f	scope:	-	version:	-	Trust: 0.6
vendor:	siemens	model:	ruggedcom m969nc	scope:	lt	version:	4.3.8	Trust: 0.6

sources: CNVD: CNVD-2023-62040 // JVNDB: JVNDB-2023-021984 // NVD: CVE-2023-39269

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-39269
value:	HIGH
Trust: 1.0
productcert@siemens.com:	CVE-2023-39269
value:	HIGH
Trust: 1.0
NVD:	CVE-2023-39269
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2023-62040
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2023-62040
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2023-39269
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 2.0
NVD:	CVE-2023-39269
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2023-62040 // JVNDB: JVNDB-2023-021984 // NVD: CVE-2023-39269 // NVD: CVE-2023-39269

PROBLEMTYPE DATA

problemtype:	CWE-770	Trust: 1.0
problemtype:	Allocation of resources without limits or throttling (CWE-770) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-021984 // NVD: CVE-2023-39269

PATCH

title:

Patch for Siemens RUGGEDCOM ROS Device Web Server Denial of Service Vulnerability

url:

https://www.cnvd.org.cn/patchInfo/show/449716

Trust: 0.6

sources: CNVD: CNVD-2023-62040

EXTERNAL IDS

db:	NVD	id:	CVE-2023-39269	Trust: 3.3
db:	SIEMENS	id:	SSA-770902	Trust: 2.5
db:	JVN	id:	JVNVU90056839	Trust: 0.8
db:	ICS CERT	id:	ICSA-23-222-08	Trust: 0.8
db:	JVNDB	id:	JVNDB-2023-021984	Trust: 0.8
db:	CNVD	id:	CNVD-2023-62040	Trust: 0.6
db:	VULMON	id:	CVE-2023-39269	Trust: 0.1

sources: CNVD: CNVD-2023-62040 // VULMON: CVE-2023-39269 // JVNDB: JVNDB-2023-021984 // NVD: CVE-2023-39269

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-770902.pdf	Trust: 1.9
url:	https://jvn.jp/vu/jvnvu90056839/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-39269	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-222-08	Trust: 0.8
url:	https://cert-portal.siemens.com/productcert/html/ssa-770902.html	Trust: 0.6
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2023-62040 // VULMON: CVE-2023-39269 // JVNDB: JVNDB-2023-021984 // NVD: CVE-2023-39269

SOURCES

db:	CNVD	id:	CNVD-2023-62040
db:	VULMON	id:	CVE-2023-39269
db:	JVNDB	id:	JVNDB-2023-021984
db:	NVD	id:	CVE-2023-39269

LAST UPDATE DATE

2024-08-14T12:41:37.550000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2023-62040	date:	2023-08-09T00:00:00
db:	VULMON	id:	CVE-2023-39269	date:	2023-08-08T00:00:00
db:	JVNDB	id:	JVNDB-2023-021984	date:	2024-01-22T02:02:00
db:	NVD	id:	CVE-2023-39269	date:	2023-11-14T11:15:10.950

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2023-62040	date:	2023-08-09T00:00:00
db:	VULMON	id:	CVE-2023-39269	date:	2023-08-08T00:00:00
db:	JVNDB	id:	JVNDB-2023-021984	date:	2024-01-22T00:00:00
db:	NVD	id:	CVE-2023-39269	date:	2023-08-08T10:15:21.967