CVE-2023-46156
HIGHCVSS 7.5/10EPSS 1.24%
Last modified
CVE-2023-46156 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.. EPSS estimates a 1.24% chance of exploitation in the next 30 days.
Description
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | Simatic Drive Controller Cpu 1504d Tf Firmware | < 3.1.0 |
| Siemens | Simatic Drive Controller Cpu 1507d Tf Firmware | < 3.1.0 |
| Siemens | Simatic Et 200sp Open Control 1515sp Pc2 Firmware | All versions |
| Siemens | Simatic S7-1500 Cpu 1510sp F-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1510sp-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1511-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1511c-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1511f-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1511t-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1511tf-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1512c-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1512sp F-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1512sp-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1513-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1513f-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1513r-1 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1514sp F-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1514sp-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1514spt F-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1514spt-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1515-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1515f-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1515r-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1515t-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1515tf-2 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1516-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1516f-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1516t-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1517-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1517f-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1517h-3 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1517t-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1517tf-3 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1518-4 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1518f-4 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1518hf-4 Pn Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1518t-4 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu 1518tf-4 Pn\/Dp Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu S7-1518-4 Pn\/Dp Odk Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Cpu S7-1518f-4 Pn\/Dp Odk Firmware | < 3.1.0 |
| Siemens | Simatic S7-1500 Et 200pro\ | _cpu_1513pro_f-2_pn_firmware |
| Siemens | Simatic S7-1500 Et 200pro\ | _cpu_1513pro-2_pn_firmware |
| Siemens | Simatic S7-1500 Et 200pro\ | _cpu_1516pro_f-2_pn_firmware |
| Siemens | Simatic S7-1500 Et 200pro\ | cpu_1516pro-2_pn_firmware |
| Siemens | Simatic S7-1500 Software Controller Firmware | All versions |
| Siemens | Simatic S7-Plcsim Advanced Firmware | < 6.0 |
| Siemens | Siplus Et 200sp Cpu 1510sp F-1 Pn Firmware | All versions |
| Siemens | Siplus Et 200sp Cpu 1510sp F-1 Pn Rail Firmware | All versions |
| Siemens | Siplus Et 200sp Cpu 1510sp-1 Pn Firmware | All versions |
| Siemens | Siplus Et 200sp Cpu 1510sp-1 Pn Rail Firmware | All versions |
Showing 50 of 76 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-46156?
Affected devices improperly handle specially crafted packets sent to port 102/tcp.
This could allow an attacker to create a denial of service condition. A restart is needed to restore
normal operations.
How severe is CVE-2023-46156?
CVE-2023-46156 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.24% probability of exploitation in the next 30 days.
How do I fix CVE-2023-46156?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-4615This vulnerability allows remote attackers to disclose sensi…7.5
- CVE-2023-46150Cross-Site Request Forgery (CSRF) vulnerability in WP Milita…8.8
- CVE-2023-46151Cross-Site Request Forgery (CSRF) vulnerability in AWESOME T…8.8
- CVE-2023-46152Cross-Site Request Forgery (CSRF) vulnerability in realmag77…8.8
- CVE-2023-46153Unauth. Stored Cross-Site Scripting (XSS) vulnerability in U…6.1
- CVE-2023-46154Deserialization of Untrusted Data vulnerability in E2Pdf.Com…7.2
- CVE-2023-46157File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows th…8.8
- CVE-2023-46158IBM WebSphere Application Server Liberty 23.0.0.9 through 23…9.8
- CVE-2023-46159IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an auth…6.5
- CVE-2023-4616This vulnerability allows remote attackers to disclose sensi…7.5
- CVE-2023-46167IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Se…7.5
- CVE-2023-46169 IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.4…6.5
Are you affected by CVE-2023-46156?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST