CVE-2023-43775 MEDIUM

CVE-2023-43775: Security issue in SMP Gateway automation platform

Vendor Eaton
Product SMP SG-4260
Weakness CWE-400
Published September 26, 2023
Last update September 24, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

What the vulnerability does

01Description

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.

Key dates

02Disclosure timeline

September 26, 2023 CVE published
September 24, 2024 Record updated