https://cert-portal.siemens.com/productcert/html/ssa-969738.html
https://www.cisa.gov/news-events/ics-advisories/icsa-24-261-01
Severity: High
ID: 502482
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 10/8/2024
Updated: 10/9/2024
Supported Sensors: Tenable OT Security
Risk Factor: Low
Score: 3.6
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:T/RC:C
CPE: cpe:/o:siemens:simatic_s7-200_smart_cpu_sr60_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_st20_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_sr40_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_cr40_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_sr20_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_st30_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_sr30_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_st40_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_cr60_firmware, cpe:/o:siemens:simatic_s7-200_smart_cpu_st60_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/10/2024
Vulnerability Publication Date: 9/10/2024
CVE: CVE-2024-43647
CWE: 400
ICSA: 24-228-01