CVE-2023-43775

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows

attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is not vulnerable anymore.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
EatonSMP SG-4260>= 8.0, < 8.0R9; >= 8.1, < 8.1R5; >= 8.2, < 8.2R4
EatonSMP SG-42507.0; 7.1; 7.2; >= 8.0, < 8.0R9; >= 8.1, < 8.1R5; >= 8.2, < 8.2R4
EatonSMP 4/DP6.3; 7.0; 7.1; 7.2; >= 8.0, < 8.0R9; >= 8.1, < 8.1R5; >= 8.2, < 8.2R4
EatonSMP 166.3; 7.0; 7.1; 7.2; >= 8.0, < 8.0R9

References

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-437766.6Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It wasCVE-2023-437776.5Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the inCVE-2023-43784.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 beforeCVE-2023-437825.5Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created CVE-2023-437837.5Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been createdCVE-2023-437847.5Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's positCVE-2023-437855.5A vulnerability was found in libX11 due to a boundary condition within the _XkbReadKeySyms() function. This flaw allows a local user to trigCVE-2023-437865.5A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all CVE-2023-437877.8A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a local user to trigger CVE-2023-437885.5A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer() function. This flaw allows a local CVE-2023-437895.5A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds readCVE-2023-43797.5An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to