CVE-2023-36521
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of all socket-based communication of the affected products if the result server is enabled.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-07-11 10:15:10.897000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2023-36521",
"sourceIdentifier": "[email protected]",
"published": "2023-07-11T10:15:10.897",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a\r\nvulnerability that may lead to a denial of service condition. An attacker may\r\ncause a denial of service situation of all socket-based communication of the\r\naffected products if the result server is enabled."
},
{
"lang": "es",
"value": "Una vulnerabilidad ha sido identificada en SIMATIC MV540 H (Todas las versiones anteriores a V3.3.4), SIMATIC MV540 S (Todas las versiones anteriores a V3.3.4), SIMATIC MV550 H (Todas las versiones anteriores a V3.3.4), SIMATIC MV550 S (Todas las versiones anteriores a V3.3.4), SIMATIC MV560 U (Todas las versiones anteriores a V3.3.4), SIMATIC MV560 X (Todas las versiones anteriores a V3.3.4). El servidor de sincronización de resultados de los productos afectados contiene una vulnerabilidad que puede conducir a una condición de denegación de servicio. Un atacante puede causar una situación de denegación de servicio de toda la comunicación basada en sockets de los productos afectados si el servidor de resultados está habilitado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "SIMATIC MV540 H",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIMATIC MV540 S",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIMATIC MV550 H",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIMATIC MV550 S",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIMATIC MV560 U",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "SIMATIC MV560 X",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions < V3.3.4",
"status": "affected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "siemens",
"product": "simatic_mv540_h",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "siemens",
"product": "simatic_mv540_s",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "siemens",
"product": "simatic_mv550_h",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "siemens",
"product": "simatic_mv550_s",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "siemens",
"product": "simatic_mv560_u",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "siemens",
"product": "simatic_mv560_x",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "0",
"lessThan": "V3.3.4",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-11-21T14:06:23.456400Z",
"id": "CVE-2023-36521",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "443FA290-C457-4B6A-B7D0-D93A9891422D"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18944887-DE3F-4FB4-88D2-1C8EC89A1481"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "93539B72-DB14-467F-B18E-09E02FC32AA2"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4B016178-2DCB-417C-B20F-8B9E1904BE8C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "D57AB6A9-9462-4E86-8375-18D8E7B33A68"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*",
"matchCriteriaId": "324A87A6-2DC6-4797-8191-0BE2D8D1F9FC"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "68DA4485-B7D7-4650-89D2-109555CA31E7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4B6E1134-8C21-4045-BD02-F44250474C40"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "A48A7347-0E33-4D16-AA61-B76C561C95B3"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D2FBB8F8-C886-4A2B-8808-6E3D6A57B271"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.4",
"matchCriteriaId": "D6AF3675-11B7-4FB3-8151-3D307204CE9A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DAA25C73-59D0-469D-BE6F-6188F645C1D9"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}