VULNERABILITY INTELLIGENCE
CVE-2023-43775
CVSS score4.7 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2023-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Description
Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.
Weakness classification
- CybersecurityCOE@eaton.com: CWE-400
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- CybersecurityCOE@eaton.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory