Details of VAR-202311-0440

ID

VAR-202311-0440

CVE

CVE-2023-44317

TITLE

Multiple Siemens products use trusted data to accept unrelated untrusted data vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2023-86597

DESCRIPTION

A vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB205-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB205-3 (ST, PN) (All versions < V4.5), SCALANCE XB205-3LD (SC, E/IP) (All versions < V4.5), SCALANCE XB205-3LD (SC, PN) (All versions < V4.5), SCALANCE XB208 (E/IP) (All versions < V4.5), SCALANCE XB208 (PN) (All versions < V4.5), SCALANCE XB213-3 (SC, E/IP) (All versions < V4.5), SCALANCE XB213-3 (SC, PN) (All versions < V4.5), SCALANCE XB213-3 (ST, E/IP) (All versions < V4.5), SCALANCE XB213-3 (ST, PN) (All versions < V4.5), SCALANCE XB213-3LD (SC, E/IP) (All versions < V4.5), SCALANCE XB213-3LD (SC, PN) (All versions < V4.5), SCALANCE XB216 (E/IP) (All versions < V4.5), SCALANCE XB216 (PN) (All versions < V4.5), SCALANCE XC206-2 (SC) (All versions < V4.5), SCALANCE XC206-2 (ST/BFOC) (All versions < V4.5), SCALANCE XC206-2G PoE (All versions < V4.5), SCALANCE XC206-2G PoE (54 V DC) (All versions < V4.5), SCALANCE XC206-2G PoE EEC (54 V DC) (All versions < V4.5), SCALANCE XC206-2SFP (All versions < V4.5), SCALANCE XC206-2SFP EEC (All versions < V4.5), SCALANCE XC206-2SFP G (All versions < V4.5), SCALANCE XC206-2SFP G (EIP DEF.) (All versions < V4.5), SCALANCE XC206-2SFP G EEC (All versions < V4.5), SCALANCE XC208 (All versions < V4.5), SCALANCE XC208EEC (All versions < V4.5), SCALANCE XC208G (All versions < V4.5), SCALANCE XC208G (EIP def.) (All versions < V4.5), SCALANCE XC208G EEC (All versions < V4.5), SCALANCE XC208G PoE (All versions < V4.5), SCALANCE XC208G PoE (54 V DC) (All versions < V4.5), SCALANCE XC216 (All versions < V4.5), SCALANCE XC216-3G PoE (All versions < V4.5), SCALANCE XC216-3G PoE (54 V DC) (All versions < V4.5), SCALANCE XC216-4C (All versions < V4.5), SCALANCE XC216-4C G (All versions < V4.5), SCALANCE XC216-4C G (EIP Def.) (All versions < V4.5), SCALANCE XC216-4C G EEC (All versions < V4.5), SCALANCE XC216EEC (All versions < V4.5), SCALANCE XC224 (All versions < V4.5), SCALANCE XC224-4C G (All versions < V4.5), SCALANCE XC224-4C G (EIP Def.) (All versions < V4.5), SCALANCE XC224-4C G EEC (All versions < V4.5), SCALANCE XF204 (All versions < V4.5), SCALANCE XF204 DNA (All versions < V4.5), SCALANCE XF204-2BA (All versions < V4.5), SCALANCE XF204-2BA DNA (All versions < V4.5), SCALANCE XP208 (All versions < V4.5), SCALANCE XP208 (Ethernet/IP) (All versions < V4.5), SCALANCE XP208EEC (All versions < V4.5), SCALANCE XP208PoE EEC (All versions < V4.5), SCALANCE XP216 (All versions < V4.5), SCALANCE XP216 (Ethernet/IP) (All versions < V4.5), SCALANCE XP216EEC (All versions < V4.5), SCALANCE XP216POE EEC (All versions < V4.5), SCALANCE XR324WG (24 x FE, AC 230V) (All versions < V4.5), SCALANCE XR324WG (24 X FE, DC 24V) (All versions < V4.5), SCALANCE XR326-2C PoE WG (All versions < V4.5), SCALANCE XR326-2C PoE WG (without UL) (All versions < V4.5), SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions < V4.5), SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) (All versions < V4.5), SCALANCE XR328-4C WG (28xGE, AC 230V) (All versions < V4.5), SCALANCE XR328-4C WG (28xGE, DC 24V) (All versions < V4.5), SIPLUS NET SCALANCE XC206-2 (All versions < V4.5), SIPLUS NET SCALANCE XC206-2SFP (All versions < V4.5), SIPLUS NET SCALANCE XC208 (All versions < V4.5), SIPLUS NET SCALANCE XC216-4C (All versions < V4.5). Affected products do not properly validate the content of uploaded X509 certificates which could allow an attacker with administrative privileges to execute arbitrary code on the device. SCALANCE M-800, MUM-800 and S615 as well as RUGGEDCOM RM1224 are industrial routers. SCALANCE W products are wireless communication devices for connecting industrial components, such as programmable logic controllers (PLCs) or human machine interfaces (HMIs), in compliance with the IEEE 802.11 standards (802.11ac, 802.11a/b/g/h and/or 802.11n). The SCALANCE W-1700 product is a wireless communication device based on the IEEE 802.11ac standard. They are used to connect various WLAN devices (access points or clients, depending on the operating mode), focusing on industrial components such as programmable logic controllers (PLC) or human machine interfaces (HMI), etc. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) or human-machine interfaces (HMIs). Multiple Siemens products have a vulnerability that uses trusted data to accept unrelated untrusted data

Trust: 1.53

sources: NVD: CVE-2023-44317 // CNVD: CNVD-2023-86597 // VULMON: CVE-2023-44317

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2023-86597

AFFECTED PRODUCTS

vendor:	siemens	model:	scalance xr328-4c wg \	scope:	eq	version:	-	Trust: 5.0
vendor:	siemens	model:	scalance xb213-3 \	scope:	eq	version:	-	Trust: 4.0
vendor:	siemens	model:	scalance xb205-3 \	scope:	eq	version:	-	Trust: 3.0
vendor:	siemens	model:	scalance xb208 \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xb216 \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xb205-3ld \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xc206-2 \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xb213-3ld \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xr324wg \	scope:	eq	version:	-	Trust: 2.0
vendor:	siemens	model:	scalance xc216-4c g	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	siplus net scalance xc206-2	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xf204-2ba	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xf204-2ba dna	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp216 \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xr326-2c poe wg	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	siplus net scalance xc216-4c	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp208poe eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2g poe	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	siplus net scalance xc206-2sfp	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp208eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xf204	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208g	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp208	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	siplus net scalance xc208	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c g \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp216eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208g poe	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp208 \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp216	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216-4c g eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2g poe eec \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216-3g poe \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xf204 dna	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208g \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208g poe \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp g \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208g eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216-3g poe	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc224-4c g	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc224	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xp216poe eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp eec	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2sfp	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc208	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc206-2g poe \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xr326-2c poe wg \	scope:	eq	version:	-	Trust: 1.0
vendor:	siemens	model:	scalance xc216eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224-4c g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc224-4c g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204 dna	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204-2ba	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xf204-2ba dna	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp208poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xp216poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr324wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr326-2c poe wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xr328-4c wg	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc206-2	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc206-2sfp	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	siplus net scalance xc216-4c	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2g poe eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2sfp g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc208g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-3g poe	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c g	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc216-4c g eec	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb205-3	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb205-3ld	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb208	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb213-3	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb213-3ld	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xb216	scope:	lt	version:	4.5	Trust: 0.6
vendor:	siemens	model:	scalance xc206-2	scope:	lt	version:	4.5	Trust: 0.6

sources: CNVD: CNVD-2023-86597 // NVD: CVE-2023-44317

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2023-86597
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2023-86597
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2023-86597

CONFIGURATIONS

sources: NVD: CVE-2023-44317

PATCH

title:

Patch for Multiple Siemens products use trusted data to accept unrelated untrusted data vulnerabilities

url:

https://www.cnvd.org.cn/patchinfo/show/482166

Trust: 0.6

sources: CNVD: CNVD-2023-86597

EXTERNAL IDS

db:	SIEMENS	id:	SSA-699386	Trust: 1.7
db:	NVD	id:	CVE-2023-44317	Trust: 1.7
db:	CNVD	id:	CNVD-2023-86597	Trust: 0.6
db:	ICS CERT	id:	ICSA-23-320-08	Trust: 0.1
db:	VULMON	id:	CVE-2023-44317	Trust: 0.1

sources: CNVD: CNVD-2023-86597 // VULMON: CVE-2023-44317 // NVD: CVE-2023-44317

REFERENCES

url:	https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf	Trust: 1.1
url:	https://cert-portal.siemens.com/productcert/html/ssa-699386.html	Trust: 0.6
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-08	Trust: 0.1

sources: CNVD: CNVD-2023-86597 // VULMON: CVE-2023-44317 // NVD: CVE-2023-44317

SOURCES

db:	CNVD	id:	CNVD-2023-86597
db:	VULMON	id:	CVE-2023-44317
db:	NVD	id:	CVE-2023-44317

LAST UPDATE DATE

2023-11-27T19:59:28.681000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2023-86597	date:	2023-11-15T00:00:00
db:	VULMON	id:	CVE-2023-44317	date:	2023-11-21T00:00:00
db:	NVD	id:	CVE-2023-44317	date:	2023-11-21T19:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2023-86597	date:	2023-11-15T00:00:00
db:	VULMON	id:	CVE-2023-44317	date:	2023-11-14T00:00:00
db:	NVD	id:	CVE-2023-44317	date:	2023-11-14T11:15:00