NetSight
IP …
low2.7

CVE-2023-44321

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated att…

Impact

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition. The device needs to be restarted for the web interface to become available again.

Affected products

VendorProductAffected versions
Siemens6gk5205-3bb00-2ab2 Firmware
before 4.5
Siemens6gk5205-3bb00-2tb2 Firmware
before 4.5
Siemens6gk5205-3bd00-2tb2 Firmware
before 4.5
Siemens6gk5205-3bd00-2ab2 Firmware
before 4.5
Siemens6gk5205-3bf00-2tb2 Firmware
through 4.5
Siemens6gk5205-3bf00-2ab2 Firmware
before 4.5
Siemens6gk5208-0ba00-2tb2 Firmware
before 4.5
Siemens6gk5208-0ba00-2ab2 Firmware
before 4.5
Siemens6gk5213-3bd00-2tb2 Firmware
before 4.5
Siemens6gk5213-3bd00-2ab2 Firmware
before 4.5
Siemens6gk5213-3bb00-2tb2 Firmware
before 4.5
Siemens6gk5213-3bb00-2ab2 Firmware
before 4.5

Weakness classification

CWE-400

References