Vulnerability-Lookup

CNVD-2024-38016

Vulnerability from cnvd - Published: 2024-09-12

Title

Siemens Industrial产品空指针解引用漏洞（CNVD-2024-38016）

Description

SIMATIC CP 1242和CP 1243相关处理器将SIMATIC S7-1200控制器连接到广域网（WAN）。它们提供集成的安全功能，如防火墙、虚拟专用网络（VPN）和支持其他数据加密协议。SIMATIC HMI Panels用于操作员控制和监控机器和设备。SIMATIC IPC DiagBase diagnostics software允许及早识别SIMATIC工控机上的任何潜在故障，并有助于避免或减少系统停机时间。SIMATIC IPC DiagMonitor监控、报告、可视化和记录SIMATIC IPCs的系统状态。它与其他系统通信，并在事件发生时做出反应。Communication processor (CP) modules SIMATIC TIM 3V-IE和TIM 4R-IE设计使SIMATIC S7-300/S7-400 CPU能够进行以太网或遥控通信。SIMATIC WinCC Runtime Advanced是一个可视化运行时平台，用于操作员控制和监控机器和工厂。SIPLUS extreme产品专为在极端条件下可靠运行而设计，基于SIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE或其他设备。SIPLUS设备使用与其所基于的产品相同的固件。 Siemens Industrial产品存在空指针解引用漏洞，该漏洞源于受影响设备的web服务器未能正确处理关闭或重新启动请求，这可能会导致某些资源被清理。攻击者可利用该漏洞在系统中造成拒绝服务。

Severity

中

Patch Name

Siemens Industrial产品空指针解引用漏洞（CNVD-2024-38016）的补丁

Patch Description

Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-423808.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-423808.html

Impacted products

Name
['Siemens SIMATIC IPC DiagMonitor', 'Siemens SIMATIC WinCC Runtime Advanced', 'Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)', 'SIEMENS SIMATIC IPC DiagBase null', 'Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) <V2.4.8', 'Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-7 LTE < V3.5.20', 'Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) < V3.5.20', 'Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)']

Name

['Siemens SIMATIC IPC DiagMonitor', 'Siemens SIMATIC WinCC Runtime Advanced', 'Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)', 'SIEMENS SIMATIC IPC DiagBase null', 'Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) <V2.4.8', 'Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) < V3.5.20', 'SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) < V3.5.20', 'Siemens SIMATIC CP 1243-7 LTE < V3.5.20', 'Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) < V3.5.20', 'Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-30755"
    }
  },
  "description": "SIMATIC CP 1242\u548cCP 1243\u76f8\u5173\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u548c\u652f\u6301\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u3002SIMATIC HMI Panels\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u8bbe\u5907\u3002SIMATIC IPC DiagBase diagnostics software\u5141\u8bb8\u53ca\u65e9\u8bc6\u522bSIMATIC\u5de5\u63a7\u673a\u4e0a\u7684\u4efb\u4f55\u6f5c\u5728\u6545\u969c\uff0c\u5e76\u6709\u52a9\u4e8e\u907f\u514d\u6216\u51cf\u5c11\u7cfb\u7edf\u505c\u673a\u65f6\u95f4\u3002SIMATIC IPC DiagMonitor\u76d1\u63a7\u3001\u62a5\u544a\u3001\u53ef\u89c6\u5316\u548c\u8bb0\u5f55SIMATIC IPCs\u7684\u7cfb\u7edf\u72b6\u6001\u3002\u5b83\u4e0e\u5176\u4ed6\u7cfb\u7edf\u901a\u4fe1\uff0c\u5e76\u5728\u4e8b\u4ef6\u53d1\u751f\u65f6\u505a\u51fa\u53cd\u5e94\u3002Communication processor (CP) modules SIMATIC TIM 3V-IE\u548cTIM 4R-IE\u8bbe\u8ba1\u4f7fSIMATIC S7-300/S7-400 CPU\u80fd\u591f\u8fdb\u884c\u4ee5\u592a\u7f51\u6216\u9065\u63a7\u901a\u4fe1\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u5de5\u5382\u3002SIPLUS extreme\u4ea7\u54c1\u4e13\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\uff0c\u57fa\u4e8eSIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\n\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684web\u670d\u52a1\u5668\u672a\u80fd\u6b63\u786e\u5904\u7406\u5173\u95ed\u6216\u91cd\u65b0\u542f\u52a8\u8bf7\u6c42\uff0c\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u67d0\u4e9b\u8d44\u6e90\u88ab\u6e05\u7406\u3002 \u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e2d\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-423808.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-38016",
  "openTime": "2024-09-12",
  "patchDescription": "SIMATIC CP 1242\u548cCP 1243\u76f8\u5173\u5904\u7406\u5668\u5c06SIMATIC S7-1200\u63a7\u5236\u5668\u8fde\u63a5\u5230\u5e7f\u57df\u7f51\uff08WAN\uff09\u3002\u5b83\u4eec\u63d0\u4f9b\u96c6\u6210\u7684\u5b89\u5168\u529f\u80fd\uff0c\u5982\u9632\u706b\u5899\u3001\u865a\u62df\u4e13\u7528\u7f51\u7edc\uff08VPN\uff09\u548c\u652f\u6301\u5176\u4ed6\u6570\u636e\u52a0\u5bc6\u534f\u8bae\u3002SIMATIC HMI Panels\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u8bbe\u5907\u3002SIMATIC IPC DiagBase diagnostics software\u5141\u8bb8\u53ca\u65e9\u8bc6\u522bSIMATIC\u5de5\u63a7\u673a\u4e0a\u7684\u4efb\u4f55\u6f5c\u5728\u6545\u969c\uff0c\u5e76\u6709\u52a9\u4e8e\u907f\u514d\u6216\u51cf\u5c11\u7cfb\u7edf\u505c\u673a\u65f6\u95f4\u3002SIMATIC IPC DiagMonitor\u76d1\u63a7\u3001\u62a5\u544a\u3001\u53ef\u89c6\u5316\u548c\u8bb0\u5f55SIMATIC IPCs\u7684\u7cfb\u7edf\u72b6\u6001\u3002\u5b83\u4e0e\u5176\u4ed6\u7cfb\u7edf\u901a\u4fe1\uff0c\u5e76\u5728\u4e8b\u4ef6\u53d1\u751f\u65f6\u505a\u51fa\u53cd\u5e94\u3002Communication processor (CP) modules SIMATIC TIM 3V-IE\u548cTIM 4R-IE\u8bbe\u8ba1\u4f7fSIMATIC S7-300/S7-400 CPU\u80fd\u591f\u8fdb\u884c\u4ee5\u592a\u7f51\u6216\u9065\u63a7\u901a\u4fe1\u3002SIMATIC WinCC Runtime Advanced\u662f\u4e00\u4e2a\u53ef\u89c6\u5316\u8fd0\u884c\u65f6\u5e73\u53f0\uff0c\u7528\u4e8e\u64cd\u4f5c\u5458\u63a7\u5236\u548c\u76d1\u63a7\u673a\u5668\u548c\u5de5\u5382\u3002SIPLUS extreme\u4ea7\u54c1\u4e13\u4e3a\u5728\u6781\u7aef\u6761\u4ef6\u4e0b\u53ef\u9760\u8fd0\u884c\u800c\u8bbe\u8ba1\uff0c\u57fa\u4e8eSIMATIC, LOGO!, SITOP, SINAMICS, SIMOTION, SCALANCE\u6216\u5176\u4ed6\u8bbe\u5907\u3002SIPLUS\u8bbe\u5907\u4f7f\u7528\u4e0e\u5176\u6240\u57fa\u4e8e\u7684\u4ea7\u54c1\u76f8\u540c\u7684\u56fa\u4ef6\u3002\r\n\r\nSiemens Industrial\u4ea7\u54c1\u5b58\u5728\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u8bbe\u5907\u7684web\u670d\u52a1\u5668\u672a\u80fd\u6b63\u786e\u5904\u7406\u5173\u95ed\u6216\u91cd\u65b0\u542f\u52a8\u8bf7\u6c42\uff0c\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u67d0\u4e9b\u8d44\u6e90\u88ab\u6e05\u7406\u3002 \u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e2d\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Industrial\u4ea7\u54c1\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2024-38016\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIMATIC IPC DiagMonitor",
      "Siemens SIMATIC WinCC Runtime Advanced",
      "Siemens SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)",
      "SIEMENS SIMATIC IPC DiagBase null",
      "Siemens TIM 1531 IRC (6GK7543-1MX00-0XE0) \u003cV2.4.8",
      "Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) \u003c V3.5.20",
      "Siemens SIMATIC CP 1243-1 (incl. SIPLUS variants) \u003c V3.5.20",
      "SIEMENS SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) \u003c V3.5.20",
      "SIEMENS SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) \u003c V3.5.20",
      "Siemens SIMATIC CP 1243-7 LTE \u003c V3.5.20",
      "Siemens SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) \u003c V3.5.20",
      "Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants)"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html",
  "serverity": "\u4e2d",
  "submitTime": "2024-09-12",
  "title": "Siemens Industrial\u4ea7\u54c1\u7a7a\u6307\u9488\u89e3\u5f15\u7528\u6f0f\u6d1e\uff08CNVD-2024-38016\uff09"
}

CVE-2023-30755 (GCVE-0-2023-30755)

Vulnerability from cvelistv5 – Published: 2024-09-10 09:33 – Updated: 2024-09-10 15:10

Summary

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP 1243-7 LTE (All versions < V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. This could allow a remote attacker with elevated privileges to cause a denial of service condition in the system.

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

5.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:10 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

12 products

Vendor	Product	Version
Siemens	SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC CP 1243-1 (incl. SIPLUS variants)	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC CP 1243-7 LTE	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC CP 1243-8 IRC	Affected: 0 , < V3.5.20 (custom)
Siemens	SIMATIC HMI Comfort Panels (incl. SIPLUS variants)	Affected: All versions
Siemens	SIMATIC IPC DiagBase	Affected: 0 , < * (custom)
Siemens	SIMATIC IPC DiagMonitor	Affected: All versions
Siemens	SIMATIC WinCC Runtime Advanced	Affected: All versions
Siemens	SIPLUS TIM 1531 IRC	Affected: 0 , < V2.4.8 (custom)
Siemens	TIM 1531 IRC	Affected: 0 , < V2.4.8 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-30755",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:10:26.969445Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-10T15:10:35.515Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-7 LTE",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC CP 1243-8 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V3.5.20",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC HMI Comfort Panels (incl. SIPLUS variants)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC IPC DiagBase",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC IPC DiagMonitor",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC Runtime Advanced",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIPLUS TIM 1531 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.4.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIM 1531 IRC",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V2.4.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions \u003c V3.5.20), SIMATIC CP 1243-7 LTE (All versions \u003c V3.5.20), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions \u003c V3.5.20), SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMATIC WinCC Runtime Advanced (All versions), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions \u003c V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions \u003c V2.4.8). The web server of the affected devices do not properly handle the shutdown or reboot request, which could lead to the clean up of certain resources. \r\n\r\nThis could allow a remote attacker with elevated privileges to cause a denial of service condition in the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-10T09:33:39.215Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-423808.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2023-30755",
    "datePublished": "2024-09-10T09:33:39.215Z",
    "dateReserved": "2023-04-14T11:16:56.497Z",
    "dateUpdated": "2024-09-10T15:10:35.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.