{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "SIMATIC MV540 H", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}, {"defaultStatus": "unknown", "product": "SIMATIC MV540 S", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}, {"defaultStatus": "unknown", "product": "SIMATIC MV550 H", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}, {"defaultStatus": "unknown", "product": "SIMATIC MV550 S", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}, {"defaultStatus": "unknown", "product": "SIMATIC MV560 U", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}, {"defaultStatus": "unknown", "product": "SIMATIC MV560 X", "vendor": "Siemens", "versions": [{"status": "affected", "version": "All versions < V3.3.4"}]}], "source": "productcert@siemens.com"}, {"affectedData": [{"cpes": ["cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv540_h", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv540_s", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv550_h", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv550_s", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv560_u", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"cpes": ["cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "simatic_mv560_x", "vendor": "siemens", "versions": [{"lessThan": "V3.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv540_h_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "443FA290-C457-4B6A-B7D0-D93A9891422D", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv540_h:-:*:*:*:*:*:*:*", "matchCriteriaId": "18944887-DE3F-4FB4-88D2-1C8EC89A1481", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv540_s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93539B72-DB14-467F-B18E-09E02FC32AA2", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv540_s:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B016178-2DCB-417C-B20F-8B9E1904BE8C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv550_h_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D57AB6A9-9462-4E86-8375-18D8E7B33A68", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv550_h:-:*:*:*:*:*:*:*", "matchCriteriaId": "324A87A6-2DC6-4797-8191-0BE2D8D1F9FC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv550_s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "68DA4485-B7D7-4650-89D2-109555CA31E7", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv550_s:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B6E1134-8C21-4045-BD02-F44250474C40", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv560_u_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A48A7347-0E33-4D16-AA61-B76C561C95B3", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv560_u:-:*:*:*:*:*:*:*", "matchCriteriaId": "D2FBB8F8-C886-4A2B-8808-6E3D6A57B271", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:siemens:simatic_mv560_x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D6AF3675-11B7-4FB3-8151-3D307204CE9A", "versionEndExcluding": "3.3.4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:siemens:simatic_mv560_x:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAA25C73-59D0-469D-BE6F-6188F645C1D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a\r\nvulnerability that may lead to a denial of service condition. An attacker may\r\ncause a denial of service situation of all socket-based communication of the\r\naffected products if the result server is enabled."}, {"lang": "es", "value": "Una vulnerabilidad ha sido identificada en SIMATIC MV540 H (Todas las versiones anteriores a V3.3.4), SIMATIC MV540 S (Todas las versiones anteriores a V3.3.4), SIMATIC MV550 H (Todas las versiones anteriores a V3.3.4), SIMATIC MV550 S (Todas las versiones anteriores a V3.3.4), SIMATIC MV560 U (Todas las versiones anteriores a V3.3.4), SIMATIC MV560 X (Todas las versiones anteriores a V3.3.4). El servidor de sincronizaci\u00f3n de resultados de los productos afectados contiene una vulnerabilidad que puede conducir a una condici\u00f3n de denegaci\u00f3n de servicio. Un atacante puede causar una situaci\u00f3n de denegaci\u00f3n de servicio de toda la comunicaci\u00f3n basada en sockets de los productos afectados si el servidor de resultados est\u00e1 habilitado."}], "id": "CVE-2023-36521", "lastModified": "2026-10-23T23:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "productcert@siemens.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-36521", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-11-21T14:06:23.456400Z", "version": "2.0.3"}}]}, "published": "2023-07-11T10:15:10.897", "references": [{"source": "productcert@siemens.com", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdf"}], "sourceIdentifier": "productcert@siemens.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "productcert@siemens.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-770"}], "source": "nvd@nist.gov", "type": "Primary"}]}
CVE record
NVD configurations
Red Hat packages
No data
OpenCVE enrichment
No data
EUVD