by Kastro
Paper/Archive/CVE-2024-33698

CVE-2024-33698

Siemens Opcenter Quality — A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.…

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.4.644 × 2012.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Affected

ProductAffectedFixed inSource
Opcenter Quality< V2406V2406CNA
Opcenter RDnL< V2410V2410CNA
SIMATIC PCS neo V4.0all versions–CNA
SIMATIC PCS neo V4.1< V4.1 Update 2V4.1 Update 2CNA
SIMATIC PCS neo V5.0< V5.0 Update 1V5.0 Update 1CNA
SINEC NMSall versions–CNA
SINEMA Remote Connect Client< V3.2 SP3V3.2 SP3CNA
Totally Integrated Automation Portal (TIA Portal) V16all versions–CNA
Totally Integrated Automation Portal (TIA Portal) V17< V17 Update 8V17 Update 8CNA
Totally Integrated Automation Portal (TIA Portal) V18< V18 Update 5V18 Update 5CNA
Totally Integrated Automation Portal (TIA Portal) V19< V19 Update 3V19 Update 3CNA
simatic_pcs_neo4.0 – < 4.1_update_24.1_update_2CISA-ADP

Scores by source

siemens (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
siemens (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert-portal.siemens.com/productcert/html/ssa-039007.html