Out of Bounds Read Vulnerability in SIMATIC and TIA Portal Products by Siemens
CVE-2023-46280
Key Information:
- Vendor
Siemens
- Status
- Vendor
- CVE Published:
- 14 May 2024
What is CVE-2023-46280?
An out of bounds read vulnerability has been identified in multiple Siemens products, including the SIMATIC and TIA Portal series. This flaw can potentially lead to the crashing of the Windows kernel, resulting in a Blue Screen of Death (BSOD) error. Attackers could exploit this vulnerability to destabilize systems, impacting operational efficiency and safety within industrial environments. It is crucial for users of these products to be aware of this vulnerability and to implement necessary mitigations as outlined by Siemens.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Security Configuration Tool (SCT) 0
SIMATIC Automation Tool 0
SIMATIC BATCH V9.1 0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved