SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32736US | — | — | ||
A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SIMATIC STEP 7 Safety V… | ||||
references
External citations — patches, advisories, analysis.
remediations (60)
- MitigationSIMATIC S7-PLCSIM V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC S7-PLCSIM V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 Safety V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC STEP 7 V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC Unified V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMATIC WinCC V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOCODE ES V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.4 SP1
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.4 SP3
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIMOTION SCOUT TIA V5.5 SP1
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationSINAMICS Startdrive V18
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Safety ES V17 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Safety ES V18 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Soft Starter ES V17 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationSIRIUS Soft Starter ES V18 (TIA Portal)
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V16
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V17
Avoid opening untrusted files from unknown sources in affected products
- MitigationTIA Portal Cloud V18
Avoid opening untrusted files from unknown sources in affected products
- No fix plannedSIMATIC S7-PLCSIM V16
Currently no fix is planned
- No fix plannedSIMATIC S7-PLCSIM V17
Currently no fix is planned
- No fix plannedSIMATIC STEP 7 Safety V16
Currently no fix is planned
- No fix plannedSIMATIC STEP 7 V16
Currently no fix is planned
- No fix plannedSIMATIC WinCC Unified V16
Currently no fix is planned
- No fix plannedSIMATIC WinCC V16
Currently no fix is planned
- No fix plannedSIMOCODE ES V16
Currently no fix is planned
- No fix plannedSIMOTION SCOUT TIA V5.4 SP1
Currently no fix is planned
- No fix plannedSINAMICS Startdrive V16
Currently no fix is planned
- No fix plannedTIA Portal Cloud V16
Currently no fix is planned
- FixedSIMATIC STEP 7 Safety V17
Update to V17 Update 8 or later version
- FixedSIMATIC STEP 7 Safety V18
Update to V18 Update 5 or later version
- FixedSIMATIC STEP 7 V17
Update to V17 Update 8 or later version
- FixedSIMATIC STEP 7 V18
Update to V18 Update 5 or later version
- FixedSIMATIC WinCC Unified V17
Update to V17 Update 8 or later version
- FixedSIMATIC WinCC Unified V18
Update to V18 SP5 or later version
- FixedSIMATIC WinCC V17
Update to V17 Update 8 or later version
- FixedSIMATIC WinCC V18
Update to V18 SP5 or later version
- FixedSIMOCODE ES V17
Update to V17 Update 8 or later version
- FixedSIMOCODE ES V18
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedSIMOTION SCOUT TIA V5.4 SP3
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - FixedSIMOTION SCOUT TIA V5.5 SP1
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedSINAMICS Startdrive V17
Update SIMATIC STEP 7 V17 to V17 Update 8 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - FixedSINAMICS Startdrive V18
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedSIRIUS Safety ES V17 (TIA Portal)
Update to V17 Update 8 or later version
- FixedSIRIUS Safety ES V18 (TIA Portal)
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedSIRIUS Soft Starter ES V17 (TIA Portal)
Update to V17 Update 8 or later version
- FixedSIRIUS Soft Starter ES V18 (TIA Portal)
Update SIMATIC STEP 7 V18 to V18 Update 5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - FixedTIA Portal Cloud V17
TIA Portal Cloud V4.6.0.1 or later version updated TIA Portal to V17 Update 8 or later version
- FixedTIA Portal Cloud V18
TIA Portal Cloud V4.6.1.0 or later version updated TIA Portal to V18 Update 5 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan