Sign-up

ID

VAR-202310-0197


CVE

CVE-2023-35796


TITLE

Siemens'  SINEMA Server  Cross-site scripting vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2023-015417

DESCRIPTION

A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with `SYSTEM` privileges on the application server. (ZDI-CAN-19823). Siemens' SINEMA Server Exists in a cross-site scripting vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens SINEMA Server. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of SNMP sysLocation OID. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Siemens SINEMA Server is a software developed by the German Siemens company specifically for industrial applications. It enables you to fully visualize and monitor your network

Trust: 2.88

sources: NVD: CVE-2023-35796 // JVNDB: JVNDB-2023-015417 // ZDI: ZDI-23-1600 // CNVD: CNVD-2023-75578 // VULMON: CVE-2023-35796

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2023-75578

AFFECTED PRODUCTS

vendor:siemensmodel:sinema serverscope:eqversion:14.0

Trust: 1.0

vendor:シーメンスmodel:sinema serverscope: - version: -

Trust: 0.8

vendor:シーメンスmodel:sinema serverscope:eqversion: -

Trust: 0.8

vendor:シーメンスmodel:sinema serverscope:eqversion:14.0

Trust: 0.8

vendor:siemensmodel:sinema serverscope: - version: -

Trust: 0.7

vendor:siemensmodel:sinema serverscope:eqversion:v14

Trust: 0.6

sources: ZDI: ZDI-23-1600 // CNVD: CNVD-2023-75578 // JVNDB: JVNDB-2023-015417 // NVD: CVE-2023-35796

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-35796
value: CRITICAL

Trust: 1.0

productcert@siemens.com: CVE-2023-35796
value: HIGH

Trust: 1.0

NVD: CVE-2023-35796
value: CRITICAL

Trust: 0.8

ZDI: CVE-2023-35796
value: HIGH

Trust: 0.7

CNVD: CNVD-2023-75578
value: HIGH

Trust: 0.6

CNVD: CNVD-2023-75578
severity: HIGH
baseScore: 7.6
vectorString: AV:N/AC:H/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: HIGH
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 4.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2023-35796
baseSeverity: CRITICAL
baseScore: 9.0
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.3
impactScore: 6.0
version: 3.1

Trust: 1.0

productcert@siemens.com: CVE-2023-35796
baseSeverity: HIGH
baseScore: 8.3
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.6
impactScore: 6.0
version: 3.1

Trust: 1.0

NVD: CVE-2023-35796
baseSeverity: CRITICAL
baseScore: 9.0
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2023-35796
baseSeverity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.6
impactScore: 5.9
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-23-1600 // CNVD: CNVD-2023-75578 // JVNDB: JVNDB-2023-015417 // NVD: CVE-2023-35796 // NVD: CVE-2023-35796

PROBLEMTYPE DATA

problemtype:CWE-79

Trust: 1.0

problemtype:Cross-site scripting (CWE-79) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-015417 // NVD: CVE-2023-35796

PATCH

title:Siemens has issued an update to correct this vulnerability.url:https://cert-portal.siemens.com/productcert/html/ssa-594373.html

Trust: 0.7

title:Patch for Siemens SINEMA Server V14 cross-site scripting vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/466701

Trust: 0.6

sources: ZDI: ZDI-23-1600 // CNVD: CNVD-2023-75578

EXTERNAL IDS

db:NVDid:CVE-2023-35796

Trust: 4.0

db:SIEMENSid:SSA-594373

Trust: 1.9

db:JVNid:JVNVU98753493

Trust: 0.8

db:JVNDBid:JVNDB-2023-015417

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-19823

Trust: 0.7

db:ZDIid:ZDI-23-1600

Trust: 0.7

db:CNVDid:CNVD-2023-75578

Trust: 0.6

db:VULMONid:CVE-2023-35796

Trust: 0.1

sources: ZDI: ZDI-23-1600 // CNVD: CNVD-2023-75578 // VULMON: CVE-2023-35796 // JVNDB: JVNDB-2023-015417 // NVD: CVE-2023-35796

REFERENCES

url:https://cert-portal.siemens.com/productcert/pdf/ssa-594373.pdf

Trust: 1.9

url:https://jvn.jp/vu/jvnvu98753493/

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2023-35796

Trust: 0.8

url:https://cert-portal.siemens.com/productcert/html/ssa-594373.html

Trust: 0.7

url:https://cwe.mitre.org/data/definitions/79.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: ZDI: ZDI-23-1600 // VULMON: CVE-2023-35796 // JVNDB: JVNDB-2023-015417 // NVD: CVE-2023-35796

CREDITS

Andreas Finstad

Trust: 0.7

sources: ZDI: ZDI-23-1600

SOURCES

db:ZDIid:ZDI-23-1600
db:CNVDid:CNVD-2023-75578
db:VULMONid:CVE-2023-35796
db:JVNDBid:JVNDB-2023-015417
db:NVDid:CVE-2023-35796

LAST UPDATE DATE

2024-08-14T13:19:44.083000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-23-1600date:2023-11-14T00:00:00
db:CNVDid:CNVD-2023-75578date:2023-10-11T00:00:00
db:VULMONid:CVE-2023-35796date:2023-10-10T00:00:00
db:JVNDBid:JVNDB-2023-015417date:2023-12-27T05:23:00
db:NVDid:CVE-2023-35796date:2023-10-24T12:25:01.420

SOURCES RELEASE DATE

db:ZDIid:ZDI-23-1600date:2023-11-14T00:00:00
db:CNVDid:CNVD-2023-75578date:2023-10-13T00:00:00
db:VULMONid:CVE-2023-35796date:2023-10-10T00:00:00
db:JVNDBid:JVNDB-2023-015417date:2023-12-27T00:00:00
db:NVDid:CVE-2023-35796date:2023-10-10T11:15:11.733