CVE Feed

    Dashboard / CVE / CVE-2023-50763

    CVE-2023-50763

    A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8). The web server of affected products, if configured to allow the import of PKCS12 containers, could end up in an infinite loop when processing incomplete certificate chains. This could allow an authenticated remote attacker to create a denial of service condition by importing specially crafted PKCS12 containers.

    Published:Jun 11, 2024
    Last Modified:Apr 15, 2026
    EPS:Jun 11, 2024
    EPSS Score:0.00433
    CVSS Score:4.9

    Affected Products

    Vendor
    Siemens
    Product
    Simatic Cp 1542sp-1
    Vendor
    Siemens
    Product
    Simatic Cp 1542sp-1 Irc
    Vendor
    Siemens
    Product
    Simatic Cp 1543sp-1
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1542sp-1 Irc Tx Rail
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1543sp-1 Isec
    Vendor
    Siemens
    Product
    Siplus Et 200sp Cp 1543sp-1 Isec Tx Rail
    Vendor
    Siemens
    Product
    Siplus Tim 1531 Irc
    Vendor
    Siemens
    Product
    Tim 1531 Irc

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-40771 (CVSS 9.3) — A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMA…
    CVE-2022-43768 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2022-43767 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2022-43716 (CVSS 7.5) — A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM…
    CVE-2021-41991 (CVSS 7.5) — The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many r…
    CVE-2017-2681 (CVSS 7.1) — Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could…
    CVE-2017-2680 (CVSS 7.1) — Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected product…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High