CVE-2023-48363
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-48363 is a vulnerability that affects various versions of OpenPCS 7, SIMATIC BATCH, SIMATIC PCS 7, SIMATIC Route Control, SIMATIC WinCC Runtime Professional, and SIMATIC WinCC. The vulnerability lies in the implementation of the RPC communication protocol, which fails to handle certain unorganized RPC messages properly. Exploiting this vulnerability can lead to a denial of service condition in the RPC server. The base severity of this vulnerability is rated as MEDIUM, with a base score of 6.5. It does not require any privileges or user interaction for exploitation and has an attack vector of ADJACENT_NETWORK. The impact score is 3.6, indicating a potential high availability impact. Remediation measures are not mentioned in the provided information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions