What’s Vulnerable › Vulnerabilities

CVE-2023-44321

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-400

Description

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Affected products

• Siemens 6Ag1206-2Bb00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1206-2Bs00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1208-0Ba00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1216-4Bs00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-0Ba00-2Gf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-0Ba00-2Yf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-2Aa00-2Gf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-2Aa00-2Yf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bb00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bb00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bd00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bd00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bf00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bf00-2Tb2 Firmware: through 4.5
• Siemens 6Gk5206-2Bb00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bd00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bs00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Tc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-5Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-5Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ga00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ga00-2Fc2 Firmware: before 4.5 — fixed in 4.5

How to fix

Upgrade to a fixed version: Siemens 6Ag1206-2Bb00-7Ac2 Firmware 4.5; Siemens 6Ag1206-2Bs00-7Ac2 Firmware 4.5; Siemens 6Ag1208-0Ba00-7Ac2 Firmware 4.5; Siemens 6Ag1216-4Bs00-7Ac2 Firmware 4.5; Siemens 6Gk5204-0Ba00-2Gf2 Firmware 4.5; Siemens 6Gk5204-0Ba00-2Yf2 Firmware 4.5; Siemens 6Gk5204-2Aa00-2Gf2 Firmware 4.5; Siemens 6Gk5204-2Aa00-2Yf2 Firmware 4.5; Siemens 6Gk5205-3Bb00-2Ab2 Firmware 4.5; Siemens 6Gk5205-3Bb00-2Tb2 Firmware 4.5; Siemens 6Gk5205-3Bd00-2Ab2 Firmware 4.5; Siemens 6Gk5205-3Bd00-2Tb2 Firmware 4.5. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-087301.html
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html
• https://cert-portal.siemens.com/productcert/html/ssa-353002.html
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html
• https://cert-portal.siemens.com/productcert/html/ssa-353002.html
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf

Get alerted when CVE-2023-44321 or the next vulnerability affects your stack