PatchSiren

PatchSiren cyber security CVE debrief

CVE-2023-45863 Siemens CVE debrief

CVE-2023-45863 is a Linux kernel flaw in lib/kobject.c that can lead to a fill_kobj_path out-of-bounds write when a local attacker with root access triggers a race condition. Siemens maps this issue to 19 SCALANCE W-series products in ICSA-25-044-09 and recommends updating to V3.0.0 or later.

Vendor
Siemens
Product
SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0)
CVSS
MEDIUM 6.4
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations running the affected Siemens SCALANCE WAB/WAM/WUB/WUM devices, especially OT and industrial network operators that rely on these products for wireless connectivity or network infrastructure. Security teams responsible for Linux-based embedded devices should also review whether any deployed equipment includes the affected Siemens product lines.

Technical summary

The advisory states that CVE-2023-45863 affects Linux kernel versions before 6.2.3, where a race condition in lib/kobject.c can cause an out-of-bounds write in fill_kobj_path. The CVSS vector provided by the source is CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating the attacker needs local root privileges and the attack complexity is high. Siemens' CSAF advisory lists 19 affected SCALANCE products and directs users to update to V3.0.0 or later.

Defensive priority

Medium. The issue requires local root access and high attack complexity, but successful exploitation could affect confidentiality, integrity, and availability. Prioritize remediation for any deployed affected SCALANCE devices, especially where administrative access is broad or device hardening is weak.

Recommended defensive actions

  • Identify whether any of the 19 Siemens SCALANCE WAB/WAM/WUB/WUM product variants listed in the advisory are deployed.
  • Upgrade affected products to V3.0.0 or later as directed by Siemens.
  • Restrict and monitor privileged access on affected devices, since the issue requires root access.
  • Review OT change windows and plan updates carefully to minimize operational disruption.
  • Track Siemens advisory SSA-769027 and CISA advisory ICSA-25-044-09 for any follow-on guidance.

Evidence notes

Source advisory ICSA-25-044-09 and Siemens reference SSA-769027 both describe the issue as a Linux kernel bug in lib/kobject.c before 6.2.3 that can trigger a fill_kobj_path out-of-bounds write via a race condition with root access. The advisory enumerates 19 affected Siemens SCALANCE products and recommends updating to V3.0.0 or later. The source also provides CVSS 6.4 (MEDIUM) with vector CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H. The May 6, 2025 source revision is noted as a typo fix only.

Sources and references

Verified primary and authoritative sources

  • CVE-2023-45863 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2023-45863

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2023-45863 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2023-45863

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-044-09.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-769027.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-769027.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.