Siemens OPC UA
The products listed below contain two authentication bypass vulnerabilities that could allow an attacker to gain access to the data managed by the server. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-42513US | — | — | ||
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints. | ||||
| CVE-2024-42512US | — | — | ||
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security p… | ||||
references
External citations — patches, advisories, analysis.
- SSA-858251: Authentication Bypass Vulnerabilities in OPC UA - CSAF Versionself
- SSA-858251: Authentication Bypass Vulnerabilities in OPC UA - HTML Versionself
- ICS Advisory ICSA-25-072-09 JSONself
- ICS Advisory ICSA-25-072-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (17)
- MitigationSIMATIC IPC DiagMonitor
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default. Systems running with default configuration are therefore not affected by this vulnerability.
- MitigationSIMATIC WinCC Unified V18
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default in Unified RT. Systems running with default configuration are therefore not affected by this vulnerability.
- MitigationSIMATIC WinCC Unified V19
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default in Unified RT. Systems running with default configuration are therefore not affected by this vulnerability.
- No fix plannedIndustrial Edge for Machine Tools (formerly known as "SINUMERIK Edge")
Currently no fix is planned
- No fix plannedSIMATIC Energy Manager PRO V7.2
Currently no fix is planned
- No fix plannedSIMATIC Energy Manager PRO V7.2
Currently no fix is planned
- No fix plannedSIMATIC Energy Manager PRO V7.3
Currently no fix is planned
- No fix plannedSIMATIC Energy Manager PRO V7.3
Currently no fix is planned
- No fix plannedSIMATIC IPC DiagMonitor
Currently no fix is planned
- No fix availableSIMATIC WinCC Unified V18
Currently no fix is available
- FixedSIMATIC Energy Manager PRO V7.4
Update to V7.4 Update 7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997044/ - FixedSIMATIC Energy Manager PRO V7.4
Update to V7.4 Update 7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997044/ - FixedSIMATIC Energy Manager PRO V7.5
Update to V7.5 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109996728/ - FixedSIMATIC Energy Manager PRO V7.5
Update to V7.5 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109996728/ - FixedSIMATIC WinCC Unified V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - FixedSIMATIC WinCC V8.0
Update to V8.0 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109818723/ - FixedSIMIT V11
Update to V11.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987184/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan