Details of VAR-202311-0437

ID

VAR-202311-0437

CVE

CVE-2023-44374

TITLE

Vulnerabilities in multiple Siemens products involving asynchronous access to shared data within a multi-threaded context

Trust: 0.8

sources: JVNDB: JVNDB-2023-017956

DESCRIPTION

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.0), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.0), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.0), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.0), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.0), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.0), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.0), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.0), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.0), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.0), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.0), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.0), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.0), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.0), SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions), SCALANCE WAM766-1 (EU) (6GK5766-1GE00-7DA0) (All versions), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions), SCALANCE WAM766-1 EEC (EU) (6GK5766-1GE00-7TA0) (All versions), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions), SCALANCE WUB762-1 (6GK5762-1AJ00-2AA0) (All versions), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions), SCALANCE WUM766-1 (EU) (6GK5766-1GE00-3DA0) (All versions), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions), SCALANCE WUM766-1 (US) (6GK5766-1GE00-3DB0) (All versions). Affected devices allow to change the password, but insufficiently check which password is to be changed. With this an authenticated attacker could, under certain conditions, be able to change the password of another, potential admin user allowing her to escalate her privileges. 6gk5205-3bb00-2ab2 firmware, 6gk5205-3bb00-2tb2 firmware, 6gk5205-3bd00-2tb2 Multiple Siemens products, including firmware, contain vulnerabilities related to asynchronous access to shared data within a multi-threaded context.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. SCALANCE M-800, MUM-800 and S615 as well as RUGGEDCOM RM1224 are industrial routers. SCALANCE W products are wireless communication devices for connecting industrial components, such as programmable logic controllers (PLCs) or human machine interfaces (HMIs), in compliance with the IEEE 802.11 standards (802.11ac, 802.11a/b/g/h and/or 802.11n). The SCALANCE W-1700 product is a wireless communication device based on the IEEE 802.11ac standard. They are used to connect various WLAN devices (access points or clients, depending on the operating mode), focusing on industrial components such as programmable logic controllers (PLCs) or human machine interfaces (HMIs), etc. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) or human-machine interfaces (HMIs)

Trust: 2.25

sources: NVD: CVE-2023-44374 // JVNDB: JVNDB-2023-017956 // CNVD: CNVD-2023-86590 // VULMON: CVE-2023-44374

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2023-86590

AFFECTED PRODUCTS

vendor:	siemens	model:	6gk5216-0ba00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-3rs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5326-2qs00-3rr3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ua00-5es6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bf00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2gs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bd00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ra00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5224-4gs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5204-0ba00-2gf2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4ss00-3ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2rs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-3rs00-5ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-4gs00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4fs00-3rr3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bd00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ba00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5224-4gs00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6ag1206-2bb00-7ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2rs00-5ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ha00-2es6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6ag1208-0ba00-7ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bf00-2tb2	scope:	lte	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ga00-2tc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5204-0ba00-2yf2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2rs00-5fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-4gs00-2tc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5324-0ba00-3ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6ag1216-4bs00-7ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bd00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6ag1206-2bs00-7ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ba00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ba00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ha00-2ts6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bb00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ba00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bb00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bb00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-4bs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5224-4gs00-2tc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ha00-2es6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ua00-5es6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5324-0ba00-2ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4ss00-2ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bb00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2bd00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2bs00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ba00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-4gs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ba00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5205-3bd00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ba00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5204-2aa00-2yf2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bf00-2tb2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5326-2qs00-3ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2bb00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ra00-5ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4fs00-3ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4fs00-2ar3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5328-4fs00-2rr3	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ha00-2as6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ha00-2ts6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ga00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2gs00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5224-0ba00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2bs00-2ac2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5206-2gs00-2tc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5204-2aa00-2gf2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5216-0ha00-2as6	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5208-0ga00-2fc2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	siemens	model:	6gk5213-3bf00-2ab2	scope:	lt	version:	4.5	Trust: 1.0
vendor:	シーメンス	model:	6gk5206-2bd00-2ac2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bf00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bf00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5208-0ba00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5216-0ba00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bd00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bf00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bb00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5206-2rs00-5ac2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5216-0ba00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bb00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bd00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bd00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5213-3bb00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bf00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bb00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5206-2rs00-2ac2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5205-3bd00-2ab2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5206-2bb00-2ac2	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	6gk5208-0ba00-2tb2	scope:	-	version:	-	Trust: 0.8
vendor:	siemens	model:	scalance xc216eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224-4c g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224-4c g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204 dna	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204-2ba	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204-2ba dna	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr324wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr326-2c poe wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr328-4c wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc206-2	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc206-2sfp	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc216-4c	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2g poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-3g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb205-3	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb205-3ld	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb213-3	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb213-3ld	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2	scope:	lt	version:	4.5	Trust: 0.6

sources: CNVD: CNVD-2023-86590 // JVNDB: JVNDB-2023-017956 // NVD: CVE-2023-44374

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-44374
value:	HIGH
Trust: 1.0
productcert@siemens.com:	CVE-2023-44374
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2023-44374
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2023-86590
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2023-86590
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:L/AU:S/C:N/I:C/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	COMPLETE
availabilityImpact:	NONE
exploitabilityScore:	8.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2023-44374
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
productcert@siemens.com:	CVE-2023-44374
baseSeverity:	MEDIUM
baseScore:	6.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2023-44374
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2023-86590 // JVNDB: JVNDB-2023-017956 // NVD: CVE-2023-44374 // NVD: CVE-2023-44374

PROBLEMTYPE DATA

problemtype:	CWE-567	Trust: 1.0
problemtype:	Asynchronous access to shared data in a multithreaded context (CWE-567) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-017956 // NVD: CVE-2023-44374

PATCH

title:

Patch for Asynchronous access vulnerability to shared data in multiple Siemens products in a multi-threaded context

url:

https://www.cnvd.org.cn/patchInfo/show/482376

Trust: 0.6

sources: CNVD: CNVD-2023-86590

EXTERNAL IDS

db:	NVD	id:	CVE-2023-44374	Trust: 3.3
db:	SIEMENS	id:	SSA-699386	Trust: 2.5
db:	SIEMENS	id:	SSA-180704	Trust: 1.8
db:	SIEMENS	id:	SSA-690517	Trust: 1.0
db:	ICS CERT	id:	ICSA-23-320-08	Trust: 0.9
db:	JVN	id:	JVNVU93250330	Trust: 0.8
db:	JVN	id:	JVNVU98271228	Trust: 0.8
db:	JVN	id:	JVNVU92598492	Trust: 0.8
db:	ICS CERT	id:	ICSA-24-165-12	Trust: 0.8
db:	ICS CERT	id:	ICSA-23-348-14	Trust: 0.8
db:	JVNDB	id:	JVNDB-2023-017956	Trust: 0.8
db:	CNVD	id:	CNVD-2023-86590	Trust: 0.6
db:	VULMON	id:	CVE-2023-44374	Trust: 0.1

sources: CNVD: CNVD-2023-86590 // VULMON: CVE-2023-44374 // JVNDB: JVNDB-2023-017956 // NVD: CVE-2023-44374

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf	Trust: 1.9
url:	https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf	Trust: 1.8
url:	https://cert-portal.siemens.com/productcert/html/ssa-699386.html	Trust: 1.6
url:	https://cert-portal.siemens.com/productcert/html/ssa-180704.html	Trust: 1.0
url:	https://cert-portal.siemens.com/productcert/html/ssa-690517.html	Trust: 1.0
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-08	Trust: 0.9
url:	https://jvn.jp/vu/jvnvu92598492/	Trust: 0.8
url:	https://jvn.jp/vu/jvnvu98271228/	Trust: 0.8
url:	https://jvn.jp/vu/jvnvu93250330/index.html	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-44374	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-14	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-12	Trust: 0.8
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2023-86590 // VULMON: CVE-2023-44374 // JVNDB: JVNDB-2023-017956 // NVD: CVE-2023-44374

SOURCES

db:	CNVD	id:	CNVD-2023-86590
db:	VULMON	id:	CVE-2023-44374
db:	JVNDB	id:	JVNDB-2023-017956
db:	NVD	id:	CVE-2023-44374

LAST UPDATE DATE

2024-09-10T21:07:22.336000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2023-86590	date:	2023-11-15T00:00:00
db:	VULMON	id:	CVE-2023-44374	date:	2023-11-14T00:00:00
db:	JVNDB	id:	JVNDB-2023-017956	date:	2024-06-17T05:37:00
db:	NVD	id:	CVE-2023-44374	date:	2024-09-10T10:15:07.467

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2023-86590	date:	2023-11-15T00:00:00
db:	VULMON	id:	CVE-2023-44374	date:	2023-11-14T00:00:00
db:	JVNDB	id:	JVNDB-2023-017956	date:	2024-01-10T00:00:00
db:	NVD	id:	CVE-2023-44374	date:	2023-11-14T11:15:13.753