CVE-2023-30756 | Siemens SIMATIC CP 1242-7 V2 HTTP Request Header null pointer dereference (ssa-423808)

A vulnerability, which was classified as problematic, was found in Siemens SIMATIC CP 1242-7 V2, SIMATIC CP 1243-1, SIMATIC CP 1243-1 DNP3, SIMATIC CP 1243-1 IEC, SIMATIC CP 1243-7 LTE, SIMATIC CP 1243-8 IRC, SIMATIC HMI Comfort Panels, SIMATIC IPC DiagBase, SIMATIC IPC DiagMonitor, SIMATIC WinCC Runtime Advanced, SIPLUS TIM 1531 IRC and TIM 1531 IRC. Affected is an unknown function of the component HTTP Request Header Handler. The manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2023-30756. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.