ID
VAR-202403-0689
CVE
CVE-2024-22044
TITLE
Siemens SENTRON 3KC ATC6 Ethernet Module hidden function vulnerability
Trust: 0.6
DESCRIPTION
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet. This could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. Siemens SENTRON 3KC ATC6 Expansion Module is a power distribution protection device from Germany's Siemens, used to monitor and protect power systems
Trust: 1.44
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | siemens | model: | sentron 3kc atc6 expansion module ethernet | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-912 | Trust: 1.0 |
PATCH
| title: | Patch for Siemens SENTRON 3KC ATC6 Ethernet Module hidden function vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/534571 | Trust: 0.6 |
EXTERNAL IDS
| db: | SIEMENS | id: | SSA-918992 | Trust: 1.6 |
| db: | NVD | id: | CVE-2024-22044 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-13808 | Trust: 0.6 |
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-918992.html | Trust: 1.6 |
SOURCES
| db: | CNVD | id: | CNVD-2024-13808 |
| db: | NVD | id: | CVE-2024-22044 |
LAST UPDATE DATE
2024-08-14T15:20:37.329000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-13808 | date: | 2024-03-19T00:00:00 |
| db: | NVD | id: | CVE-2024-22044 | date: | 2024-03-12T12:40:13.500 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-13808 | date: | 2024-03-19T00:00:00 |
| db: | NVD | id: | CVE-2024-22044 | date: | 2024-03-12T11:15:49.153 |