CVE-2023-43775
Assigner: Eaton
Published: 2023-09-26T13:50:13.211Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SMP SG-4260
vendor: Eaton
versions: lessThan: 8.0R9
status: affected
version: 8.0
versionType: custom
lessThan: 8.1R5
status: affected
version: 8.1
versionType: custom
lessThan: 8.2R4
status: affected
version: 8.2
versionType: custom
defaultStatus: unaffected
product: SMP SG-4250
vendor: Eaton
versions: status: affected
version: 7.0
status: affected
version: 7.1
status: affected
version: 7.2
lessThan: 8.0R9
status: affected
version: 8.0
versionType: custom
lessThan: 8.1R5
status: affected
version: 8.1
versionType: custom
lessThan: 8.2R4
status: affected
version: 8.2
versionType: custom
defaultStatus: unaffected
product: SMP 4/DP
vendor: Eaton
versions: status: affected
version: 6.3
status: affected
version: 7.0
status: affected
version: 7.1
status: affected
version: 7.2
lessThan: 8.0R9
status: affected
version: 8.0
versionType: custom
lessThan: 8.1R5
status: affected
version: 8.1
versionType: custom
lessThan: 8.2R4
status: affected
version: 8.2
versionType: custom
defaultStatus: unaffected
product: SMP 16
vendor: Eaton
versions: status: affected
version: 6.3
status: affected
version: 7.0
status: affected
version: 7.1
status: affected
version: 7.2
lessThan: 8.0R9
status: affected
version: 8.0
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Communications Security Establishment, Canada.
datePublic: 2023-09-28T13:49:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows 

attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause
the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is
not vulnerable anymore.<br>
value: Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows 

attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause
the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is
not vulnerable anymore.

metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-400
description: CWE-400: Uncontrolled Resource Consumption
type: CWE
source: discovery: UNKNOWN
title: Security issue in SMP Gateway automation platform
x_generator: engine: Vulnogram 0.1.0-dev