https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-06
https://cert-portal.siemens.com/productcert/html/ssa-711309.html
https://cert-portal.siemens.com/productcert/html/ssa-118850.html
https://support.industry.siemens.com/cs/ww/en/view/109773914/
https://support.industry.siemens.com/cs/ww/en/view/109826242/
https://support.industry.siemens.com/cs/ww/en/view/109820674/
https://support.industry.siemens.com/cs/ww/en/view/109478459/
https://support.industry.siemens.com/cs/ww/en/view/109823215/
https://support.industry.siemens.com/cs/ww/en/view/109822278/
https://support.industry.siemens.com/cs/ww/en/view/109824227/
https://support.industry.siemens.com/cs/ww/en/view/109824204/
Severity: High
ID: 501684
Version: 1.5
Type: remote
Family: Tenable.ot
Published: 9/25/2023
Updated: 11/26/2024
Supported Sensors: Tenable OT Security
Risk Factor: Medium
Score: 4.4
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2023-28831
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CPE: cpe:/o:siemens:simatic_s7-1500_et_200pro_cpu_firmware:2.9.7, cpe:/o:siemens:simatic_drive_controller_cpu_firmware:3.0.3, cpe:/o:siemens:siplus_s7-1500_cpu_firmware:2.9.7, cpe:/o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:30.0.0, cpe:/o:siemens:simatic_s7-1500_cpu_firmware:3.0.3, cpe:/o:siemens:simatic_s7-1500_cpu_firmware:2.9.7, cpe:/o:siemens:siplus_s7-1500_cpu_firmware:3.0.3, cpe:/o:siemens:simatic_drive_controller_cpu_firmware:2.9.7, cpe:/o:siemens:simatic_et_200sp_open_controller_cpu_1515sp_pc2_firmware:21.9.7, cpe:/o:siemens:siplus_et_200sp_cpu_firmware:2.9.7
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 9/12/2023
Vulnerability Publication Date: 9/12/2023
CVE: CVE-2023-28831
CWE: 190
ICSA: 23-348-06