Memory leak in Siemens SIMATIC CP 1242-7 V2
Priority LOW 39CWE-401Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-401.
Summary
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-7 LTE (All versions < V3.4.29), SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.3), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.3), SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) (All versions < V3.0.37), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.3), SINAMICS S210 (6SL5...) (All versions >= V6.1 < V6.1 HF2), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.3), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.3), SIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0) (All versions < V3.0.37). The webserver implementation of the affected products does not correctly release allocated memory after it has been used. An attacker with network access could use this vulnerability to cause a denial-of-service condition in the webserver of the affected product.
Why it matters now
EPSS 0.00956 61st percentileScored 2026-11-07
Fix Fixed SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (Siemens): V3.4.29SIMATIC CP 1243-1 (incl. SIPLUS variants) (Siemens): V3.4.29+12 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 (incl. SIPLUS variants) | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) | all versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-7 LTE | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1243-8 IRC | before V3.4.29 | V3.4.29 | Patch available | CNA |
| Siemens | SIMATIC CP 1542SP-1 | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIMATIC CP 1542SP-1 IRC | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIMATIC CP 1543-1 | before V3.0.37 | V3.0.37 | Patch available | CNA |
| Siemens | SIMATIC CP 1543SP-1 | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SINAMICS S210 (6SL5...) | V6.1 to before V6.1 HF2 | V6.1 HF2 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | SIPLUS NET CP 1543-1 | before V3.0.37 | V3.0.37 | Patch available | CNA |
- SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-1 (incl. SIPLUS variants) VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) VendorSiemens Affected all versions Fixed in — No fix listed CNA
- SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-7 LTE VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1243-8 IRC VendorSiemens Affected before V3.4.29 Fixed in V3.4.29 Patch available CNA
- SIMATIC CP 1542SP-1 VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIMATIC CP 1542SP-1 IRC VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIMATIC CP 1543-1 VendorSiemens Affected before V3.0.37 Fixed in V3.0.37 Patch available CNA
- SIMATIC CP 1543SP-1 VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SINAMICS S210 (6SL5...) VendorSiemens Affected V6.1 to before V6.1 HF2 Fixed in V6.1 HF2 Patch available CNA
- SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- SIPLUS NET CP 1543-1 VendorSiemens Affected before V3.0.37 Fixed in V3.0.37 Patch available CNA
CPE configurations NVD · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:6gk7243-8rx30-0xe0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk7243-8rx30-0xe0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6gk7543-1ax00-0xe0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6gk7543-1ax00-0xe0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:6ag1543-1ax00-2xe0_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:6ag1543-1ax00-2xe0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:6gk7243-8rx30-0xe0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk7243-8rx30-0xe0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6gk7543-1ax00-0xe0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6gk7543-1ax00-0xe0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:6ag1543-1ax00-2xe0_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:6ag1543-1ax00-2xe0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1242-7_v2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1242-7_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_1243-7_lte_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_1243-7_lte:*:*:*:*:*:*:*:* | all versions | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:* | 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:* | 5.1 sp1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1_hotfix8:*:*:*:*:*:* | 5.1 sp1_hotfix8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:-:*:*:*:*:*:* | 5.2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix2:*:*:*:*:*:* | 5.2 hotfix2 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix5:*:*:*:*:*:* | 5.2 hotfix5 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix6:*:*:*:*:*:* | 5.2 hotfix6 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix7:*:*:*:*:*:* | 5.2 hotfix7 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3:*:*:*:*:*:* | 5.2 sp3 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix3:*:*:*:*:*:* | 5.2 sp3_hotfix3 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix5:*:*:*:*:*:* | 5.2 sp3_hotfix5 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix6:*:*:*:*:*:* | 5.2 sp3_hotfix6 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix9:*:*:*:*:*:* | 5.2 sp3_hotfix9 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:-:*:*:*:*:*:* | 6.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:hotfix1:*:*:*:*:*:* | 6.1 hotfix1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp_1243-1_dnp3_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1_dnp3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-1_iec_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-1_iec:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_1243-7_lte_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_1243-7_lte:*:*:*:*:*:*:*:* Versions all versions Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:* Versions 5.1 sp1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1_hotfix8:*:*:*:*:*:* Versions 5.1 sp1_hotfix8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:-:*:*:*:*:*:* Versions 5.2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix2:*:*:*:*:*:* Versions 5.2 hotfix2 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix5:*:*:*:*:*:* Versions 5.2 hotfix5 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix6:*:*:*:*:*:* Versions 5.2 hotfix6 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:hotfix7:*:*:*:*:*:* Versions 5.2 hotfix7 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3:*:*:*:*:*:* Versions 5.2 sp3 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix3:*:*:*:*:*:* Versions 5.2 sp3_hotfix3 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix5:*:*:*:*:*:* Versions 5.2 sp3_hotfix5 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix6:*:*:*:*:*:* Versions 5.2 sp3_hotfix6 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.2:sp3_hotfix9:*:*:*:*:*:* Versions 5.2 sp3_hotfix9 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:-:*:*:*:*:*:* Versions 6.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:6.1:hotfix1:*:*:*:*:*:* Versions 6.1 hotfix1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-1 (incl. SIPLUS variants) (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-1 IEC (incl. SIPLUS variants) (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-7 LTE (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1243-8 IRC (Siemens) Fixed in V3.4.29
- Fix · CNA SIMATIC CP 1542SP-1 (Siemens) Fixed in V2.3
- Fix · CNA SIMATIC CP 1542SP-1 IRC (Siemens) Fixed in V2.3
- Fix · CNA SIMATIC CP 1543-1 (Siemens) Fixed in V3.0.37
- Fix · CNA SIMATIC CP 1543SP-1 (Siemens) Fixed in V2.3
- Fix · CNA SINAMICS S210 (6SL5...) (Siemens) Fixed in V6.1 HF2
- Fix · CNA SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (Siemens) Fixed in V2.3
- Fix · CNA SIPLUS NET CP 1543-1 (Siemens) Fixed in V3.0.37
Timeline
- 2026-10-02 Threatist record created from CVE-2023-38380
- 2026-10-03 Alias added: GHSA-532g-fpxj-7pxx
References
Sources
- CVE-2023-38380 · CVE Program
- CVE-2023-38380 · NVD
- FIRST EPSS
- GHSA-532g-fpxj-7pxx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences