CVE-2023-43775

MEDIUM

Eaton SMP Gateway Firmware < 8.0r9 - Denial of Service via Web Server

Title source: llm
STIX 2.1

Description

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.

References (1)

Core 1

Scores

CVSS v3 4.7
EPSS 0.0067
EPSS Percentile 47.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (15)
eaton/smp_16_firmware 6.3
eaton/smp_16_firmware 7.0
eaton/smp_16_firmware 7.1
eaton/smp_16_firmware 7.2
eaton/smp_16_firmware 8.0 - 8.0r9
eaton/smp_4\/dp_firmware 6.3
eaton/smp_4\/dp_firmware 7.0
eaton/smp_4\/dp_firmware 7.1
eaton/smp_4\/dp_firmware 7.2
eaton/smp_4\/dp_firmware 8.0 - 8.0r9
... and 5 more
Published Sep 27, 2023
Tracked Since Feb 18, 2026