VDB
SSA-309571
SSA-309571
PUBLISHED
CVSS 2.799999952316284 LOW
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Risk Scores
CVSS 3.1
2.799999952316284
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N/E:P/RL:U/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0) | |
| Siemens | SIMATIC IPC427E | |
| Siemens | SINUMERIK MC MCU 1720 | |
| Siemens | SIMATIC IPC527G | |
| Siemens | SIMATIC IPC847E | |
| Siemens | SIMATIC IPC3000 SMART V3 | |
| Siemens | SIMATIC Field PG M6 | |
| Siemens | SINUMERIK 828D HW PU.4 | |
| Siemens | SIMATIC ITP1000 | |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP family (incl. SIPLUS variant) | |
| Siemens | SINUMERIK ONE PPU 1740 | |
| Siemens | SIMATIC IPC477E | |
| Siemens | SIMATIC IPC647E | |
| Siemens | SINUMERIK ONE / SINUMERIK 840D sl Handheld Terminal HT 10 | |
| Siemens | SIMATIC Drive Controller CPU 1507D TF (6ES7615-7DF10-0AB0) | |
| Siemens | SIMATIC IPC547G | |
| Siemens | SIMATIC IPC347G | |
| Siemens | SINUMERIK ONE NCU 1740 | |
| Siemens | SIMATIC IPC627E | |
| Siemens | SIMATIC IPC677E |
…and 5 more
Timeline
- Aug 10, 2021 CVE Published
- Feb 13, 2024 CVE Updated
References
- https://cert-portal.siemens.com/productcert/csaf/ssa-309571.json advisory
- https://cert-portal.siemens.com/productcert/html/ssa-309571.html advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf advisory
- https://cert-portal.siemens.com/productcert/txt/ssa-309571.txt advisory
- https://support.industry.siemens.com/cs/ww/en/view/109763408 patch
- https://support.industry.siemens.com/cs/ww/en/view/109763408/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109743969/ patch