6.9

CVE-2023-37482

The login functionality of the web server in affected devices does not normalize the response times of login attempts. An unauthenticated remote attacker could exploit this side-channel information to distinguish between valid and invalid usernames.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorSiemens
≫
Product SIMATIC Drive Controller CPU 1504D TF
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC Drive Controller CPU 1507D TF
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1510SP F-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1510SP-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1512SP F-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1512SP-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1514SP F-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1514SP-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1514SPT F-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP CPU 1514SPT-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants)
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1211C AC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1211C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1211C DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1212C AC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1212C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1212C DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1212FC DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1212FC DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1214C AC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1214C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1214C DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1214FC DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1214FC DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1215C AC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1215C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1215C DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1215FC DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1215FC DC/DC/Rly
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1200 CPU 1217C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1511-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1511C-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1511F-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1511T-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1511TF-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1512C-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1513-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1513F-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1513pro F-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1513pro-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1513R-1 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1515-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1515F-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1515R-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1515T-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1515TF-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516F-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516pro F-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516pro-2 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516T-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1516TF-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517F-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517F-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517H-3 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517T-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1517TF-3 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518F-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518HF-4 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518T-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 CPU 1518TF-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1507S F V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1507S V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1508S F V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1508S T V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1508S TF V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller CPU 1508S V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-1500 Software Controller Linux V3
Default Statusunknown
Version < V31.1.4
Version V30.1.0
Status affected
VendorSiemens
≫
Product SIMATIC S7-PLCSIM Advanced
Default Statusunknown
Version < V7.0
Version V6.0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1212C DC/DC/DC RAIL
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214C DC/DC/DC RAIL
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214FC DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1214FC DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 AC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215 DC/DC/RLY
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215C DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1200 CPU 1215FC DC/DC/DC
Default Statusunknown
Version < V4.7
Version 0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1500 CPU 1517H-3 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1500 CPU 1518-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1500 CPU 1518F-4 PN/DP
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
VendorSiemens
≫
Product SIPLUS S7-1500 CPU 1518HF-4 PN
Default Statusunknown
Version < V3.1.2
Version V3.1.0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.146
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
productcert@siemens.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
productcert@siemens.com 6.9 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-203 Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.