{"Siemens: Multiple Products Affected by Deserialization Vulnerability","Siemens: Simatic Safety and Motion Control","Siemens: Sinamics Drive Technologies","Siemens: Simotion Safety","Siemens: TIA Portal Cloud"}

CVE-2023-32735

What is CVE-2023-32735?

A vulnerability exists in various Siemens products, including SIMATIC STEP 7, SIMATIC WinCC, and other related applications, that fails to properly restrict .NET BinaryFormatter during the deserialization of hardware configuration profiles. This imperfection may lead to type confusion, enabling an attacker to execute arbitrary code within affected applications. This could result in unauthorized actions or data manipulation, posing a significant risk to system integrity and operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References