Out of Bounds Write Vulnerability in Opcenter and TIA Portal by Siemens
CVE-2023-46283
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 12 December 2023
What is CVE-2023-46283?
A vulnerability exists in various Siemens software products that allows for an out of bounds write, potentially leading an attacker to crash the application while processing specific requests on a designated TCP port. Following the crash, the affected service is configured to automatically restart, which could be exploited by an attacker for further malicious actions. It's crucial for users of Opcenter Execution Foundation, TIA Portal, and related products to ensure they are running the latest versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Opcenter Execution Foundation 0
Opcenter Quality 0
SIMATIC PCS neo 0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved