CVEvulnerability

CVE-2023-43775

5.3 MEDIUM Published 2023-09-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-400

Description

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.

Affected configurations

• eaton smp sg-4260 firmware (>= 8.0 < 8.0r9) • eaton smp sg-4260 firmware (>= 8.1 < 8.1r5) • eaton smp sg-4260 firmware (>= 8.2 < 8.2r4) • eaton smp sg-4250 firmware (>= 8.0 < 8.0r9) • eaton smp sg-4250 firmware (>= 8.1 < 8.1r5) • eaton smp sg-4250 firmware (>= 8.2 < 8.2r4) • eaton smp sg-4250 firmware 7.0 • eaton smp sg-4250 firmware 7.1 • eaton smp sg-4250 firmware 7.2 • eaton smp 4\/dp firmware (>= 8.0 < 8.0r9) • eaton smp 4\/dp firmware (>= 8.1 < 8.1r5) • eaton smp 4\/dp firmware (>= 8.2 < 8.2r4) • eaton smp 4\/dp firmware 6.3 • eaton smp 4\/dp firmware 7.0 • eaton smp 4\/dp firmware 7.1 • eaton smp 4\/dp firmware 7.2 • eaton smp 16 firmware (>= 8.0 < 8.0r9) • eaton smp 16 firmware 6.3 • eaton smp 16 firmware 7.0 • eaton smp 16 firmware 7.1 • eaton smp 16 firmware 7.2

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References