Siemens User Management Component
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-49775US | — | — | ||
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions… | ||||
references
External citations — patches, advisories, analysis.
- SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) - CSAF Versionself
- SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) - HTML Versionself
- ICS Advisory ICSA-24-354-04 JSONself
- ICS Advisory ICSA-24-354-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (24)
- MitigationOpcenter Execution Foundation
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter Intelligence
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter Quality
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter RDnL
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V4.0
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V4.1
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V5.0
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSINEC NMS
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V16
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- No fix plannedSIMATIC PCS neo V4.0
Currently no fix is planned
- No fix plannedTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is planned
- FixedOpcenter Execution Foundation
Update to V2501.0001 or later version
https://support.sw.siemens.com/product/219646572/ - FixedOpcenter Intelligence
Update to V2501.0001 or later version
https://support.sw.siemens.com/product/287414453/ - FixedOpcenter Quality
Update to V2512 or later version
https://support.sw.siemens.com/product/249261320 - FixedOpcenter RDnL
Update to V2410 or later version
https://support.sw.siemens.com/product/297341591/ - FixedSIMATIC PCS neo V4.1
Update to V4.1 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109978820/ - FixedSIMATIC PCS neo V5.0
Update to V5.0 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977244/ - FixedSINEC NMS
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- FixedTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan