[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_rONqpW22giS3z7XpjEcEyMzin_shXaxD8DiXSNePOE":3,"g5a-risk:CVE-2023-38380":289},{"success":4,"data":5,"meta":286},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":97,"references":98,"referencesCount":113,"weaknesses":114,"weaknessesCount":123,"isActivelyExploited":124,"cisaInfo":26,"otxData":26,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":284,"notableEvents":285},"CVE-2023-38380","What is CVE-2023-38380?","A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions = V6.1 \u003C V6.1 HF2), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions \u003C V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions \u003C V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions \u003C V2.3), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) (All versions \u003C V3.0.37). The webserver implementation of the affected products does not correctly release allocated memory after it has been used.\r\n\r\nAn attacker with network access could use this vulnerability to cause a denial-of-service condition in the webserver of the affected product.","A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions = V6.1 \u003C V6.1 HF2), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL...","2023-12-12T12:15:11.477","2024-06-11T12:15:10.63",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"productcert@siemens.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.00956,[29,29,29,29,29,29,29],"High",[33,38,41,44,47,50,53,56,59,62,65,68,71,74,77,80,84,88,91,94],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"siemens","6gk7243-8rx30-0xe0_firmware","-","cpe:2.3:o:siemens:6gk7243-8rx30-0xe0_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"6gk7243-8rx30-0xe0","cpe:2.3:h:siemens:6gk7243-8rx30-0xe0:-:*:*:*:*:*:*:*",{"vendor":34,"product":42,"version":36,"criteria":43,"vulnerable":4},"6gk7543-1ax00-0xe0_firmware","cpe:2.3:o:siemens:6gk7543-1ax00-0xe0_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":45,"version":36,"criteria":46,"vulnerable":4},"6gk7543-1ax00-0xe0","cpe:2.3:h:siemens:6gk7543-1ax00-0xe0:-:*:*:*:*:*:*:*",{"vendor":34,"product":48,"version":36,"criteria":49,"vulnerable":4},"6ag1543-1ax00-2xe0_firmware","cpe:2.3:o:siemens:6ag1543-1ax00-2xe0_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":51,"version":36,"criteria":52,"vulnerable":4},"6ag1543-1ax00-2xe0","cpe:2.3:h:siemens:6ag1543-1ax00-2xe0:-:*:*:*:*:*:*:*",{"vendor":34,"product":54,"version":36,"criteria":55,"vulnerable":4},"simatic_cp_1242-7_v2_firmware","cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":57,"version":36,"criteria":58,"vulnerable":4},"simatic_cp_1242-7_v2","cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:*",{"vendor":34,"product":60,"version":36,"criteria":61,"vulnerable":4},"simatic_cp_1243-1_firmware","cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":63,"version":36,"criteria":64,"vulnerable":4},"simatic_cp_1243-1","cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:*",{"vendor":34,"product":66,"version":36,"criteria":67,"vulnerable":4},"simatic_cp_1243-1_dnp3_firmware","cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":69,"version":36,"criteria":70,"vulnerable":4},"simatic_cp_1243-1_dnp3","cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:*",{"vendor":34,"product":72,"version":36,"criteria":73,"vulnerable":4},"simatic_cp_1243-1_iec_firmware","cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":75,"version":36,"criteria":76,"vulnerable":4},"simatic_cp_1243-1_iec","cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:*",{"vendor":34,"product":78,"version":36,"criteria":79,"vulnerable":4},"simatic_cp_1243-7_lte_firmware","cpe:2.3:o:siemens:simatic_cp_1243-7_lte_firmware:-:*:*:*:*:*:*:*",{"vendor":34,"product":81,"version":82,"criteria":83,"vulnerable":4},"simatic_cp_1243-7_lte","*","cpe:2.3:h:siemens:simatic_cp_1243-7_lte:*:*:*:*:*:*:*:*",{"vendor":34,"product":85,"version":86,"criteria":87,"vulnerable":4},"sinamics_s210_firmware","5.1","cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:*",{"vendor":34,"product":85,"version":89,"criteria":90,"vulnerable":4},"5.2","cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:-:*:*:*:*:*:*",{"vendor":34,"product":85,"version":92,"criteria":93,"vulnerable":4},"6.1","cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:-:*:*:*:*:*:*",{"vendor":34,"product":95,"version":36,"criteria":96,"vulnerable":4},"sinamics_s210","cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:*",20,[99,103,106,109],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-139628.html","Siemens",[],{"url":104,"source":101,"tags":105},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-625862.html",[],{"url":107,"source":101,"tags":108},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-693975.html",[],{"url":110,"source":101,"tags":111},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-693975.pdf",[112],"Vendor Advisory",4,[115],{"id":116,"name":117,"description":118,"extendedDescription":119,"status":120,"abstraction":121,"structure":122},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",1,false,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2023-38380? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-38380, a high severity cyber security vulnerability from 2023. A vulnerability has been identified in SIMATIC CP 1242-7 V2...","CVE-2023-38380, CVE-2023-38380 vulnerability, CVE-2023-38380 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, siemens security, 6gk7243-8rx30-0xe0_firmware vulnerability, 6gk7243-8rx30-0xe0 vulnerability, 6gk7543-1ax00-0xe0_firmware vulnerability, 6gk7543-1ax00-0xe0 vulnerability, 6ag1543-1ax00-2xe0_firmware vulnerability","\u002Fwhat-is\u002Fcve-2023-38380",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-38380","Cybersecurity","CVE-2023-38380, CVE-2023-38380 vulnerability, CVE-2023-38380 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,164,174,184,194,204,214,224,234],{"Operator":153,"Negate":26,"Nodes":154},"AND",[155,160],{"Operator":156,"Negate":26,"CPEMatch":157},"OR",[158],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BBBD0600-DB41-4DE8-97FC-2D180DA1406F",{"Operator":156,"Negate":26,"CPEMatch":161},[162],{"Vulnerable":26,"Criteria":40,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A50A52E7-D8FE-4071-99B3-3652B0892D07",{"Operator":153,"Negate":26,"Nodes":165},[166,170],{"Operator":156,"Negate":26,"CPEMatch":167},[168],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EF7C15EC-3C83-434B-A313-9035302EEF87",{"Operator":156,"Negate":26,"CPEMatch":171},[172],{"Vulnerable":26,"Criteria":46,"MatchCriteriaID":173,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E42E7B79-A3D2-4AAC-80E2-7E5C19A72CC5",{"Operator":153,"Negate":26,"Nodes":175},[176,180],{"Operator":156,"Negate":26,"CPEMatch":177},[178],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":179,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9373F60E-03D0-4EB2-9774-6479A8F342C7",{"Operator":156,"Negate":26,"CPEMatch":181},[182],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F9063778-2B5F-4A32-83C8-6CEB9EE8F9C0",{"Operator":153,"Negate":26,"Nodes":185},[186,190],{"Operator":156,"Negate":26,"CPEMatch":187},[188],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"66A2C7F2-F787-4770-8F56-E2AFF1AFD780",{"Operator":156,"Negate":26,"CPEMatch":191},[192],{"Vulnerable":26,"Criteria":58,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"29D4C72C-4E84-4563-9D66-5C641AB996BA",{"Operator":153,"Negate":26,"Nodes":195},[196,200],{"Operator":156,"Negate":26,"CPEMatch":197},[198],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"373B769D-0E60-4362-BAE1-90BA6E0B211C",{"Operator":156,"Negate":26,"CPEMatch":201},[202],{"Vulnerable":26,"Criteria":64,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CA9BB25C-D5E3-43DE-8C73-06BDC43CA960",{"Operator":153,"Negate":26,"Nodes":205},[206,210],{"Operator":156,"Negate":26,"CPEMatch":207},[208],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1158D559-2A46-4BE4-B16E-C2789AD3C60E",{"Operator":156,"Negate":26,"CPEMatch":211},[212],{"Vulnerable":26,"Criteria":70,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2FFBFB96-1A35-4724-831B-68E3A9C32921",{"Operator":153,"Negate":26,"Nodes":215},[216,220],{"Operator":156,"Negate":26,"CPEMatch":217},[218],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C3E8B50-07E9-4697-B42D-86B9BE942553",{"Operator":156,"Negate":26,"CPEMatch":221},[222],{"Vulnerable":26,"Criteria":76,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DFE96226-A2DF-4A9E-8CBB-8D7CF328E404",{"Operator":153,"Negate":26,"Nodes":225},[226,230],{"Operator":156,"Negate":26,"CPEMatch":227},[228],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7FC29937-7A70-4A9F-89F8-8D17E285C225",{"Operator":156,"Negate":26,"CPEMatch":231},[232],{"Vulnerable":26,"Criteria":83,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BAFC3319-F07C-4784-9873-3E1907FE3080",{"Operator":153,"Negate":26,"Nodes":235},[236,280],{"Operator":156,"Negate":26,"CPEMatch":237},[238,240,243,246,248,251,254,257,260,263,266,269,272,275,277],{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BEBF14B3-65A0-41E9-B99C-D88548F307CD",{"Vulnerable":4,"Criteria":241,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:*","F151297C-3097-483F-98B5-0261BD547421",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1_hotfix8:*:*:*:*:*:*","4CEAB952-BBF0-4585-8F12-F25A192FAA1B",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":247,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7F4D3F85-4CA5-438E-955E-C039F7DE91B1",{"Vulnerable":4,"Criteria":249,"MatchCriteriaID":250,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix2:*:*:*:*:*:*","59608DD3-87C3-4ED1-B0C2-AFD31A7A70A3",{"Vulnerable":4,"Criteria":252,"MatchCriteriaID":253,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix5:*:*:*:*:*:*","EA3D3D7E-CB48-4B8D-8101-CB0DADEEC0B1",{"Vulnerable":4,"Criteria":255,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix6:*:*:*:*:*:*","6F8FC52F-3648-410B-8BCB-76129ABC0D4D",{"Vulnerable":4,"Criteria":258,"MatchCriteriaID":259,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix7:*:*:*:*:*:*","59BDCF31-2D94-4D7D-9EC8-60726B10DFC7",{"Vulnerable":4,"Criteria":261,"MatchCriteriaID":262,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3:*:*:*:*:*:*","D62C3EEA-000C-41CD-8264-4A4B6AE1BAD2",{"Vulnerable":4,"Criteria":264,"MatchCriteriaID":265,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix3:*:*:*:*:*:*","EF00EE34-1A68-40F0-A9FC-FBBF268C6400",{"Vulnerable":4,"Criteria":267,"MatchCriteriaID":268,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix5:*:*:*:*:*:*","C6BB896A-8C42-416E-AE03-D5A0E122BA79",{"Vulnerable":4,"Criteria":270,"MatchCriteriaID":271,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix6:*:*:*:*:*:*","B18F1100-8157-4E99-AB22-BF51EB1663B3",{"Vulnerable":4,"Criteria":273,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix9:*:*:*:*:*:*","AA9B1D54-E3A0-4EFF-8EB2-A52B8E1F117F",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":276,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E509394F-9987-41D2-A866-68479FF39DCB",{"Vulnerable":4,"Criteria":278,"MatchCriteriaID":279,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:hotfix1:*:*:*:*:*:*","2DEB162B-6579-4280-9BCC-403C1B351002",{"Operator":156,"Negate":26,"CPEMatch":281},[282],{"Vulnerable":26,"Criteria":96,"MatchCriteriaID":283,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7BFA8FB3-12A9-4D2E-BCFD-C66313521C80",[],[],{"lastModified":11,"cacheTime":287,"version":288},1792359419330,"2.0",{"score":290,"band":291,"action":292,"scoredAt":293},46,"Medium","Plan remediation","2026-10-16T07:00:05.373966+00:00"]