CVE-2023-44487

🔥 Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-10-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Affected Platforms (CPE)

💻

Siemens

Simatic S7 1500 Cpu 1518f 4 Pn\/dp Mfp Firmware

>= 3.1.5

📦

Siemens

Sinec Ins

< 1.0= 1.0

📦

Siemens

Sinec Nms

< 3.0

📦

Siemens

St7 Scadaconnect

< 1.1

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/10/10/6

🔗 http://www.openwall.com/lists/oss-security/2023/10/10/7

🔗 http://www.openwall.com/lists/oss-security/2023/10/13/4

🔗 http://www.openwall.com/lists/oss-security/2023/10/13/9

🔗 http://www.openwall.com/lists/oss-security/2023/10/18/4

🔗 http://www.openwall.com/lists/oss-security/2023/10/18/8

🔗 http://www.openwall.com/lists/oss-security/2023/10/19/6

🔗 http://www.openwall.com/lists/oss-security/2023/10/20/8

Vulnerability Description

Affected Platforms (CPE)

Simatic S7 1500 Cpu 1518f 4 Pn\/dp Mfp Firmware

Sinec Ins

Sinec Nms

St7 Scadaconnect

References & Advisories

相关漏洞威胁