CVE-2023-35920

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-11 · updated 2026-10-23
Weakness: CWE-400

Description

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.

Affected products

Siemens Simatic Mv540 H Firmware: before 3.3.4 — fixed in 3.3.4
Siemens Simatic Mv540 S Firmware: before 3.3.4 — fixed in 3.3.4
Siemens Simatic Mv550 H Firmware: before 3.3.4 — fixed in 3.3.4
Siemens Simatic Mv550 S Firmware: before 3.3.4 — fixed in 3.3.4
Siemens Simatic Mv560 U Firmware: before 3.3.4 — fixed in 3.3.4
Siemens Simatic Mv560 X Firmware: before 3.3.4 — fixed in 3.3.4

How to fix

Upgrade to a fixed version: Siemens Simatic Mv540 H Firmware 3.3.4; Siemens Simatic Mv540 S Firmware 3.3.4; Siemens Simatic Mv550 H Firmware 3.3.4; Siemens Simatic Mv550 S Firmware 3.3.4; Siemens Simatic Mv560 U Firmware 3.3.4; Siemens Simatic Mv560 X Firmware 3.3.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-35920 or the next vulnerability affects your stack