Resource allocation without limits in Siemens SIMATIC CP 1242-7 V2
Priority MEDIUM 41CWE-770Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-770.
Summary
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE0) (All versions < V3.3), SIMATIC CP 443-1 (6GK7443-1EX30-0XE1) (All versions < V3.3), SIMATIC CP 443-1 Advanced (6GK7443-1GX30-0XE0) (All versions < V3.3), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) (All versions < V3.4.29), SIPLUS NET CP 443-1 (6AG1443-1EX30-4XE0) (All versions < V3.3), SIPLUS NET CP 443-1 Advanced (6AG1443-1GX30-4XE0) (All versions < V3.3), SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) (All versions < V3.4.29), SIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0) (All versions < V3.4.29), SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.3.6), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.3.6). The webserver of the affected products contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation of the webserver of the affected product.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00954 61st percentileScored 2026-11-07
Fix Fixed SIMATIC CP 1242-7 V2 (Siemens): V3.4.29SIMATIC CP 1243-1 (Siemens): V3.4.29+20 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 1242-7 V2 | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-7 LTE EU | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-7 LTE US | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-8 IRC | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1542SP-1 | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIMATIC CP 1542SP-1 IRC | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIMATIC CP 1543SP-1 | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS NET CP 1242-7 V2 | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIPLUS NET CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS NET CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS S7-1200 CP 1243-1 | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIPLUS S7-1200 CP 1243-1 RAIL | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIPLUS TIM 1531 IRC | before V2.3.6 | V2.3.6 | Patch available | CNA |
| Siemens | TIM 1531 IRC | before V2.3.6 | V2.3.6 | Patch available | CNA |
- SIMATIC CP 1242-7 V2 VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-1 VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-7 LTE EU VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-7 LTE US VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-8 IRC VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1542SP-1 VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIMATIC CP 1542SP-1 IRC VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIMATIC CP 1543SP-1 VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS NET CP 1242-7 V2 VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIPLUS NET CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS NET CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS S7-1200 CP 1243-1 VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIPLUS S7-1200 CP 1243-1 RAIL VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIPLUS TIM 1531 IRC VendorSiemens Affected before V2.3.6 Fixed in V2.3.6 Patch available CNA
- TIM 1531 IRC VendorSiemens Affected before V2.3.6 Fixed in V2.3.6 Patch available CNA
CPE configurations NVD · 48
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-7_lte_eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 38 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:* | before 3.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* | before 3.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:* | before 3.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* | before 3.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:* | before 2.3.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* | before 2.3.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-7_lte_us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-8_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1542sp-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1542sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1542sp-1_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1543sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_443-1_firmware:*:*:*:*:*:*:*:* Versions before 3.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_443-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* Versions before 3.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_443-1_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc_diagbase_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc_diagbase:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_ipc_diagmonitor_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_ipc_diagmonitor:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1542sp-1_irc_tx_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_et_200sp_cp_1543sp-1_isec_tx_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_1242-7_v2_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_1242-7_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_443-1_firmware:*:*:*:*:*:*:*:* Versions before 3.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_443-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_443-1_advanced_firmware:*:*:*:*:*:*:*:* Versions before 3.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_443-1_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_s7-1200_cp_1243-1_rail_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_s7-1200_cp_1243-1_rail:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions before 2.3.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions before 2.3.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC CP 1242-7 V2 (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-1 (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-7 LTE EU (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-7 LTE US (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-8 IRC (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1542SP-1 (Siemens) Fixed in V2.3
- Fix · CNA SIMATIC CP 1542SP-1 IRC (Siemens) Fixed in V2.3
- Fix · CNA SIMATIC CP 1543SP-1 (Siemens) Fixed in V2.3
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS NET CP 1242-7 V2 (Siemens) Fixed in V3.4.29
- Fix · CNA SIPLUS NET CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS NET CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS S7-1200 CP 1243-1 (Siemens) Fixed in V3.4.29
- Fix · CNA SIPLUS S7-1200 CP 1243-1 RAIL (Siemens) Fixed in V3.4.29
- Fix · CNA SIPLUS TIM 1531 IRC (Siemens) Fixed in V2.3.6
- Fix · CNA TIM 1531 IRC (Siemens) Fixed in V2.3.6
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1 and 20 more products V2.3, V2.3.6 and 2 more versions
3 records Highest priority Priority MEDIUM 3 MEDIUM
Other records, highest priority first
- TI-2022-21471 Use after free in Siemens SIMATIC CP 1242-7 V2Priority MEDIUM 41
- TI-2022-21501 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All…Priority MEDIUM 40
Timeline
- 2026-10-02 Threatist record created from CVE-2022-43768
- 2026-10-03 Alias added: GHSA-wxpj-f564-69x8
References
More Siemens Simatic Cp 1242-7 V2 Firmware vulnerabilities
- TI-2022-15626 Heap-based buffer overflow in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1CRITICAL 10.0
- TI-2022-15627 Command injection in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1CRITICAL 9.8
- TI-2022-15628 Code injection in Siemens RUGGEDCOM RM1224 LTE EU CVSS 4.0HIGH 8.8
- TI-2022-21471 Use after free in Siemens SIMATIC CP 1242-7 V2 CVSS 3.1HIGH 7.5
- TI-2022-21501 A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All… CVSS 3.1HIGH 7.5
- TI-2023-19764 Memory leak in Siemens SIMATIC CP 1242-7 V2 CVSS 4.0HIGH 8.7
Sources
- CVE-2022-43768 · CVE Program
- CVE-2022-43768 · NVD
- FIRST EPSS
- GHSA-wxpj-f564-69x8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences