What’s Vulnerable › Vulnerabilities

CVE-2023-44373

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-74

Description

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell. Follow-up of CVE-2022-36323.

Affected products

• Siemens 6Ag1206-2Bb00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1206-2Bs00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1208-0Ba00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Ag1216-4Bs00-7Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-0Ba00-2Gf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-0Ba00-2Yf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-2Aa00-2Gf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5204-2Aa00-2Yf2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bb00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bb00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bd00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bd00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bf00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5205-3Bf00-2Tb2 Firmware: through 4.5
• Siemens 6Gk5206-2Bb00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bd00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Bs00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Gs00-2Tc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-5Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5206-2Rs00-5Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Ab2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Fc2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ba00-2Tb2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ga00-2Ac2 Firmware: before 4.5 — fixed in 4.5
• Siemens 6Gk5208-0Ga00-2Fc2 Firmware: before 4.5 — fixed in 4.5

How to fix

Upgrade to a fixed version: Siemens 6Ag1206-2Bb00-7Ac2 Firmware 4.5; Siemens 6Ag1206-2Bs00-7Ac2 Firmware 4.5; Siemens 6Ag1208-0Ba00-7Ac2 Firmware 4.5; Siemens 6Ag1216-4Bs00-7Ac2 Firmware 4.5; Siemens 6Gk5204-0Ba00-2Gf2 Firmware 4.5; Siemens 6Gk5204-0Ba00-2Yf2 Firmware 4.5; Siemens 6Gk5204-2Aa00-2Gf2 Firmware 4.5; Siemens 6Gk5204-2Aa00-2Yf2 Firmware 4.5; Siemens 6Gk5205-3Bb00-2Ab2 Firmware 4.5; Siemens 6Gk5205-3Bb00-2Tb2 Firmware 4.5; Siemens 6Gk5205-3Bd00-2Ab2 Firmware 4.5; Siemens 6Gk5205-3Bd00-2Tb2 Firmware 4.5. Check the vendor advisory for mitigations.

References

• https://cert-portal.siemens.com/productcert/html/ssa-019200.html
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html
• https://cert-portal.siemens.com/productcert/html/ssa-690517.html
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html
• https://cert-portal.siemens.com/productcert/html/ssa-721642.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-699386.pdf
• https://cert-portal.siemens.com/productcert/html/ssa-180704.html
• https://cert-portal.siemens.com/productcert/html/ssa-602936.html
• https://cert-portal.siemens.com/productcert/html/ssa-690517.html
• https://cert-portal.siemens.com/productcert/html/ssa-699386.html

Get alerted when CVE-2023-44373 or the next vulnerability affects your stack