XXE Vulnerability in Siemens SIMATIC Products and OPC Foundation UA .NET Sample Code
CVE-2017-12069

8.2HIGH

Key Information:

Vendor: Siemens
Status: Simatic Pcs7; Wincc
Vendor: CVE Published:; 30 August 2017

What is CVE-2017-12069?

An XML External Entity (XXE) vulnerability has been discovered in the OPC Foundation UA .NET Sample Code and various Siemens SIMATIC products. This vulnerability impacts versions prior to 2017-03-21 for the sample code and Local Discovery Server (LDS) before version 1.03.367. Attackers can exploit this vulnerability by sending specifically crafted packets to the OPC Discovery Server on port 4840/tcp. This could lead to unauthorized access to resources present on the local network, posing significant security risks to affected installations and compromising system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch