CVE-2023-46156 Use after free in SIMATIC Drive Controller CPU 1504D TF

High 7.5 Published 12 Dec 2023 Updated 25 Feb 2026

Attackers can cause denial of service on Siemens SIMATIC controllers by sending crafted packets to port 102, requiring a restart to recover.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-46156?

CVE-2023-46156 is a high-severity use after free vulnerability in Siemens SIMATIC Drive Controller CPU 1504D TF, published on 12 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

Weakness: CWE-416

Which versions are affected by CVE-2023-46156?

It affects 73 products.

Products include Siemens Simatic Drive Controller Cpu 1504d Tf Firmware, Siemens Simatic Drive Controller Cpu 1507d Tf Firmware, Siemens Simatic Et 200sp Open Control 1515sp Pc2 Firmware, Siemens Simatic S7-1500 Cpu 1510sp-1 Pn Firmware, Siemens Simatic S7-1500 Cpu 1510sp F-1 Pn Firmware, Siemens Simatic S7-1500 Cpu 1511-1 Pn Firmware and 67 more.

How do I fix CVE-2023-46156?

No fix has been published for CVE-2023-46156 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2023-46156 being exploited?

There is no known exploitation of CVE-2023-46156 in the wild and no public exploit code.

Sources

Also known as GHSA-5fwp-f47r-rg74.