CVE-2022-437677.5HighCWE-833

CVE-2022-43767: Siemens SIMATIC CP 1242-7 V2 vulnerability

Siemens · SIMATIC CP 1242-7 V2

Vendor fix available · Affected: Siemens SIMATIC CP 1242-7 V2 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.7%probability of exploitation in the next 30 days

54th percentile

050100

Higher than 54% of scored CVEs

7.5HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Siemens · SIMATIC CP 1242-7 V2before V3.4.29
Siemens · SIMATIC CP 1243-1before V3.4.29
Siemens · SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants)before V3.4.29
Siemens · SIMATIC CP 1243-1 IEC (incl. SIPLUS variants)before V3.4.29
Siemens · SIMATIC CP 1243-7 LTE EUbefore V3.4.29
Siemens · SIMATIC CP 1243-7 LTE USbefore V3.4.29
Siemens · SIMATIC CP 1243-8 IRCbefore V3.4.29
Siemens · SIMATIC CP 1542SP-1before V2.3
Siemens · SIMATIC CP 1542SP-1 IRCbefore V2.3
Siemens · SIMATIC CP 1543SP-1before V2.3
Siemens · SIMATIC CP 443-1before V3.3
Siemens · SIMATIC CP 443-1before V3.3
Siemens · SIMATIC CP 443-1 Advancedbefore V3.3
Siemens · SIPLUS ET 200SP CP 1542SP-1 IRC TX RAILbefore V2.3
Siemens · SIPLUS ET 200SP CP 1543SP-1 ISECbefore V2.3
Siemens · SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAILbefore V2.3
Siemens · SIPLUS NET CP 1242-7 V2before V3.4.29
Siemens · SIPLUS NET CP 443-1before V3.3
Siemens · SIPLUS NET CP 443-1 Advancedbefore V3.3
Siemens · SIPLUS S7-1200 CP 1243-1before V3.4.29

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Deadlock · Race Conditions
Vendor: Siemens
Published: April 2023
Band: Unlikely (under 1%), April 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2022-43767 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.