CyberSec.Space Logo
Back to CVE Browser

CVE-2023-44487

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-10-10
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Affected Platforms (CPE)

💻
Siemens

Simatic S7 1500 Cpu 1518f 4 Pn\/dp Mfp Firmware

>= 3.1.5
📦
Siemens

Sinec Ins

< 1.0= 1.0
📦
Siemens

Sinec Nms

< 3.0
📦
Siemens

St7 Scadaconnect

< 1.1

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/10/10/6
🔗 http://www.openwall.com/lists/oss-security/2023/10/10/7
🔗 http://www.openwall.com/lists/oss-security/2023/10/13/4
🔗 http://www.openwall.com/lists/oss-security/2023/10/13/9
🔗 http://www.openwall.com/lists/oss-security/2023/10/18/4
🔗 http://www.openwall.com/lists/oss-security/2023/10/18/8
🔗 http://www.openwall.com/lists/oss-security/2023/10/19/6
🔗 http://www.openwall.com/lists/oss-security/2023/10/20/8

Related Vulnerabilities

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_...

CVE-2026-64532

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Roo...

CVE-2026-64528

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition ...