Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45386US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1)… | ||||
references
External citations — patches, advisories, analysis.
- SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products - CSAF Versionself
- SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products - HTML Versionself
- ICS Advisory ICSA-25-044-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (14)
- MitigationSIMATIC PCS neo V4.0
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMATIC PCS neo V4.1
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMATIC PCS neo V5.0
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMOCODE ES V19
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIRIUS Safety ES V19 (TIA Portal)
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIRIUS Soft Starter ES V19 (TIA Portal)
Close browser and client after logout and remove all locally stored session tokens
- MitigationTIA Administrator
Close browser and client after logout and remove all locally stored session tokens
- No fix plannedSIMATIC PCS neo V4.0
Currently no fix is planned
- FixedSIMATIC PCS neo V4.1
Update to V4.1 Update 2 or later version
- FixedSIMATIC PCS neo V5.0
Update to V5.0 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977244/ - FixedSIMOCODE ES V19
Update to V19 Update 1 or later version
- FixedSIRIUS Safety ES V19 (TIA Portal)
Update to V19 Update 1 or later version
- FixedSIRIUS Soft Starter ES V19 (TIA Portal)
Update to V19 Update 1 or later version
- FixedTIA Administrator
Update to V3.0.4 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan