Publication Date: 2021-08-10
Last Update: 2022-06-14
Current Version: V1.1
CVSS v3.1 Base Score: 8.8

Affected Product and Versions Remediation
SIMATIC CP 1543-1 (incl. SIPLUS variants):
All versions < V3.0
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/
See further recommendations from section Workarounds and Mitigations
SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0):
All versions < V1.1
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/
See further recommendations from section Workarounds and Mitigations

CVSS v3.1 Base Score 7.5
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CWE: CWE-125: Out-of-bounds Read

CVSS v3.1 Base Score 8.8
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CWE: CWE-416: Use After Free

https://www.siemens.com/cert/advisories