CVE-2023-35920

A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). Affected devices cannot properly process specially crafted IP packets sent to the devices. This could allow an unauthenticated remote attacker to cause a denial of service condition. The affected devices must be restarted manually.

• CWE-400

• https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdfVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-561322.pdfVendor Advisory

Published

Jul 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35914Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-35915Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-35916Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-35917Cross-Site Request Forgery (CSRF) vulnerability in WooCommer…8.8
• CVE-2023-35918Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
• CVE-2023-3592In Mosquitto before 2.0.16, a memory leak occurs when client…7.5
• CVE-2023-35921A vulnerability has been identified in SIMATIC MV540 H (All …7.5
• CVE-2023-35924GLPI is a free asset and IT management software package. Sta…9.8
• CVE-2023-35925FastAsyncWorldEdit (FAWE) is designed for efficient world ed…5.5
• CVE-2023-35926Backstage is an open platform for building developer portals…9.9
• CVE-2023-35927NextCloud Server and NextCloud Enterprise Server provide fil…8.1
• CVE-2023-35928Nextcloud Server is a space for data storage on Nextcloud, a…8.8