Security issue in SMP Gateway automation platform
Priority LOW 26CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-400.
Summary
Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0082 57th percentileScored 2026-11-07
Fix Fixed SMP SG-4260 (Eaton): 8.0R9, 8.1R5, 8.2R4SMP SG-4250 (Eaton): 8.0R9, 8.1R5, 8.2R4+2 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Eaton | SMP SG-4260 | 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 | 8.0R9, 8.1R5, 8.2R4 | Patch available | CNA |
| Eaton | SMP SG-4250 | 7.0; 7.1; 7.2; 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 | 8.0R9, 8.1R5, 8.2R4 | Patch available | CNA |
| Eaton | SMP 4/DP | 6.3; 7.0; 7.1; 7.2; 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 | 8.0R9, 8.1R5, 8.2R4 | Patch available | CNA |
| Eaton | SMP 16 | 6.3; 7.0; 7.1; 7.2; 8.0 to before 8.0R9 | 8.0R9 | Patch available | CNA |
- SMP SG-4260 VendorEaton Affected 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 Fixed in 8.0R9, 8.1R5, 8.2R4 Patch available CNA
- SMP SG-4250 VendorEaton Affected 7.0; 7.1; 7.2; 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 Fixed in 8.0R9, 8.1R5, 8.2R4 Patch available CNA
- SMP 4/DP VendorEaton Affected 6.3; 7.0; 7.1; 7.2; 8.0 to before 8.0R9; 8.1 to before 8.1R5; 8.2 to before 8.2R4 Fixed in 8.0R9, 8.1R5, 8.2R4 Patch available CNA
- SMP 16 VendorEaton Affected 6.3; 7.0; 7.1; 7.2; 8.0 to before 8.0R9 Fixed in 8.0R9 Patch available CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:eaton:smp_sg-4260_firmware:*:*:*:*:*:*:*:* | 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 | Vulnerable | Eaton |
| cpe:2.3:h:eaton:smp_sg-4260:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Eaton |
| cpe:2.3:o:eaton:smp_sg-4250_firmware:*:*:*:*:*:*:*:* | 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_sg-4250_firmware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_sg-4250_firmware:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_sg-4250_firmware:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Eaton |
| cpe:2.3:h:eaton:smp_sg-4250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Eaton |
| cpe:2.3:o:eaton:smp_4\/dp_firmware:*:*:*:*:*:*:*:* | 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_4\/dp_firmware:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_4\/dp_firmware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Eaton |
- cpe:2.3:o:eaton:smp_sg-4260_firmware:*:*:*:*:*:*:*:* Versions 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 Vulnerable ·Eaton
- cpe:2.3:h:eaton:smp_sg-4260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Eaton
- cpe:2.3:o:eaton:smp_sg-4250_firmware:*:*:*:*:*:*:*:* Versions 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_sg-4250_firmware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_sg-4250_firmware:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_sg-4250_firmware:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Eaton
- cpe:2.3:h:eaton:smp_sg-4250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Eaton
- cpe:2.3:o:eaton:smp_4\/dp_firmware:*:*:*:*:*:*:*:* Versions 8.0 to before 8.0r9; 8.1 to before 8.1r5; 8.2 to before 8.2r4 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_4\/dp_firmware:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_4\/dp_firmware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Eaton
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:eaton:smp_4\/dp_firmware:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_4\/dp_firmware:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Eaton |
| cpe:2.3:h:eaton:smp_4\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Eaton |
| cpe:2.3:o:eaton:smp_16_firmware:*:*:*:*:*:*:*:* | 8.0 to before 8.0r9 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_16_firmware:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_16_firmware:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_16_firmware:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Eaton |
| cpe:2.3:o:eaton:smp_16_firmware:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Eaton |
| cpe:2.3:h:eaton:smp_16:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Eaton |
- cpe:2.3:o:eaton:smp_4\/dp_firmware:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_4\/dp_firmware:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Eaton
- cpe:2.3:h:eaton:smp_4\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Eaton
- cpe:2.3:o:eaton:smp_16_firmware:*:*:*:*:*:*:*:* Versions 8.0 to before 8.0r9 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_16_firmware:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_16_firmware:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_16_firmware:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Eaton
- cpe:2.3:o:eaton:smp_16_firmware:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Eaton
- cpe:2.3:h:eaton:smp_16:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Eaton
Remediation
- Fix · CNA SMP SG-4260 (Eaton) Fixed in 8.0R9, 8.1R5, 8.2R4
- Fix · CNA SMP SG-4250 (Eaton) Fixed in 8.0R9, 8.1R5, 8.2R4
- Fix · CNA SMP 4/DP (Eaton) Fixed in 8.0R9, 8.1R5, 8.2R4
- Fix · CNA SMP 16 (Eaton) Fixed in 8.0R9
Timeline
- 2026-10-02 Threatist record created from CVE-2023-43775
- 2026-10-03 Alias added: GHSA-rmfc-35gh-5fjx
References
Sources
- CVE-2023-43775 · CVE Program
- CVE-2023-43775 · NVD
- FIRST EPSS
- GHSA-rmfc-35gh-5fjx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences