Approved changes feed: RSS · Atom

cpe:2.3:o:siemens:simatic_cp_1628_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductSimatic Cp 1628 Firmware (ef07d3f6-00d8-5bfc-a763-85110885a8b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37195 vulnerable 2026-06-08 06:08:14.870735 Details available
MEDIUM (4.4)
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). Affected devices insufficiently control continuous mapping of direct memory access (DMA) requests. This could allow local attackers with administrative privileges to cause a denial of service situation on the host. A physical power cycle is required to get the system working again.
Published: 2023-10-10T10:21:24.004Z
Updated: 2024-09-19T14:23:36.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37194 vulnerable 2026-06-08 06:08:14.860639 Details available
MEDIUM (6.7)
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions). The kernel memory of affected devices is exposed to user-mode via direct memory access (DMA) which could allow a local attacker with administrative privileges to execute arbitrary code on the host system without any restrictions.
Published: 2023-10-10T10:21:22.914Z
Updated: 2024-09-19T14:27:20.089Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.