SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems
The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35783US | — | — | ||
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All… | ||||
references
External citations — patches, advisories, analysis.
remediations (11)
- No fix plannedSIMATIC WinCC V7.4
Currently no fix is planned
- FixedSIMATIC BATCH V9.1
Update to PCS7 V9.1 SP2 UC06 or later version https://support.industry.siemens.com/cs/ww/en/view/109812242/
- FixedSIMATIC Information Server 2020
Update to V2020 SP2 Update 5 or later version
- FixedSIMATIC Information Server 2022
Update to V2022 SP1 Update 2 or later version To update, use the Information Server version as bundled with PCS neo V5.0 Update 1 (<https://support.industry.siemens.com/cs/ww/en/view/109977244/>)
- FixedSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC06 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - FixedSIMATIC Process Historian 2020
Update to V2020 SP2 Update 5 or later version
- FixedSIMATIC Process Historian 2022
Update to V2022 SP1 Update 2 or later version To update, use the Process Historian version as bundled with PCS neo V5.0 Update 1 (<https://support.industry.siemens.com/cs/ww/en/view/109977244/>)
- FixedSIMATIC WinCC Runtime Professional V18
Update to V18 Update 5 or later version
- FixedSIMATIC WinCC Runtime Professional V19
Update to V19 Update 3 or later version
- FixedSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 18 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - FixedSIMATIC WinCC V8.0
Update to V8.0 Update 5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan