Denial of Service Vulnerability in Siemens SIPROTEC 5 Series

CVE-2023-28766

What is CVE-2023-28766?

A vulnerability in multiple models of the Siemens SIPROTEC 5 series has been discovered, where improper validation of HTTP request parameters in the hosted web service could allow an unauthenticated remote attacker to send specially crafted packets. This could lead to a denial of service condition, impacting the availability and proper functioning of the affected devices. Users are encouraged to review the versions affected and apply necessary updates to mitigate this security risk.

References