A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (

Summary

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Timeline

1. Sep 10, 2024, 9:36 AM UTCCVE published
2. Sep 10, 2024, 5:32 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: total

3. Oct 14, 2025, 9:15 AM UTCRecord last updated

Affected versions

• Siemens Opcenter Quality

  fixed in V2406

• Siemens Opcenter RDnL

  fixed in V2410

• Siemens SIMATIC PCS neo V4.0

  All versions

• Siemens SIMATIC PCS neo V4.1

  fixed in V4.1 Update 2

• Siemens SIMATIC PCS neo V5.0

  fixed in V5.0 Update 1

• Siemens SINEC NMS

  All versions

• Siemens SINEMA Remote Connect Client

  fixed in V3.2 SP3

• Siemens Totally Integrated Automation Portal (TIA Portal) V16

  All versions

• Siemens Totally Integrated Automation Portal (TIA Portal) V17

  fixed in V17 Update 8

• Siemens Totally Integrated Automation Portal (TIA Portal) V18

  fixed in V18 Update 5

• Siemens Totally Integrated Automation Portal (TIA Portal) V19

  fixed in V19 Update 3

References 1