A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V250
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V2501.0001, V2512, V2410, V4.1 Update 3, V5.0 Update 1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Siemens Opcenter Execution Foundation
fixed in V2501.0001
- Siemens Opcenter Intelligence
fixed in V2501.0001
- Siemens Opcenter Quality
fixed in V2512
- Siemens Opcenter RDnL
fixed in V2410
- Siemens SIMATIC PCS neo V4.0
All versions
- Siemens SIMATIC PCS neo V4.1
fixed in V4.1 Update 3
- Siemens SIMATIC PCS neo V5.0
fixed in V5.0 Update 1
- Siemens SINEC NMS
All versions
- Siemens Totally Integrated Automation Portal (TIA Portal) V16
All versions
- Siemens Totally Integrated Automation Portal (TIA Portal) V17
All versions
- Siemens Totally Integrated Automation Portal (TIA Portal) V18
All versions
- Siemens Totally Integrated Automation Portal (TIA Portal) V19
All versions