Out of Bounds Write Vulnerability in Opcenter and TIA Portal by Siemens
CVE-2023-46283

7.5HIGH

Key Information:

Vendor
Siemens
Status
Opcenter Execution Foundation
Opcenter Quality
Simatic Pcs Neo
Sinec Nms
Vendor
CVE Published:
12 December 2023

Summary

A vulnerability exists in various Siemens software products that allows for an out of bounds write, potentially leading an attacker to crash the application while processing specific requests on a designated TCP port. Following the crash, the affected service is configured to automatically restart, which could be exploited by an attacker for further malicious actions. It's crucial for users of Opcenter Execution Foundation, TIA Portal, and related products to ensure they are running the latest versions to mitigate this risk.

Affected Version(s)

Opcenter Execution Foundation 0

Opcenter Quality 0

SIMATIC PCS neo 0

References

https://cert-portal.siemens.com/productcert/pdf/ssa-99958...
https://cert-portal.siemens.com/productcert/html/ssa-9995...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.