SSA-825651

csafDEsiemens_psirt

SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2

view advisory published 2024-07-09

Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new version for SIMATIC STEP 7 (TIA Portal) V18 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-45147US——
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions <…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationSIMATIC PCS neo V4.0

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V16

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V17

    Avoid opening untrusted files from unknown sources in affected products

  • MitigationSIMATIC STEP 7 V18

    Avoid opening untrusted files from unknown sources in affected products

  • No fix plannedSIMATIC PCS neo V4.0

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 V16

    Currently no fix is planned

  • No fix plannedSIMATIC STEP 7 V17

    Currently no fix is planned

  • FixedSIMATIC STEP 7 V18

    Update to V18 Update 2 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan