Improper verification of communication channel in Siemens SIMATIC CP 343-1
Priority LOW 34CWE-940Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All versions), SIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0) (All versions), SIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0) (All versions). Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00597 48th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 343-1 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 343-1 Lean | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET CP 343-1 | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET CP 343-1 Lean | All versions | — | No fix listed | CNA |
- SIMATIC CP 343-1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC CP 343-1 Lean VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET CP 343-1 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET CP 343-1 Lean VendorSiemens Affected All versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:siemens:simatic_cp_343-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_343-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_343-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_343-1_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
| cpe:2.3:h:siemens:siplus_net_cp_343-1_lean:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:siplus_net_cp_343-1_lean_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Siemens |
- cpe:2.3:h:siemens:simatic_cp_343-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_343-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp_343-1_lean:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp_343-1_lean_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_343-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_343-1_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
- cpe:2.3:h:siemens:siplus_net_cp_343-1_lean:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:siplus_net_cp_343-1_lean_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Siemens
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-51440
- 2026-10-03 Alias added: GHSA-j4h9-5vj5-4vff
References
More Siemens Simatic Cp 343-1 Firmware vulnerabilities
- TI-2015-06768 A vulnerability has been identified in SIMATIC NET CP 342-5 (incl. CVSS 2.0HIGH 9.7
- TI-2019-10399 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
- TI-2016-07131 A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. CVSS 3.0HIGH 8.8
- TI-2021-13111 Memory corruption in Siemens SIMATIC CP 343-1 CVSS 3.1HIGH 7.5
- TI-2018-03420 Improper input validation in Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7 CVSS 3.1MEDIUM 6.5
- TI-2016-07130 A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. CVSS 3.0MEDIUM 5.3
Sources
- CVE-2023-51440 · CVE Program
- CVE-2023-51440 · NVD
- FIRST EPSS
- GHSA-j4h9-5vj5-4vff · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences