SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems
The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-35783US | — | — | ||
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (11)
- Kein Fix geplantSIMATIC WinCC V7.4
Currently no fix is planned
- BehobenSIMATIC BATCH V9.1
Update to PCS7 V9.1 SP2 UC06 or later version https://support.industry.siemens.com/cs/ww/en/view/109812242/
- BehobenSIMATIC Information Server 2020
Update to V2020 SP2 Update 5 or later version
- BehobenSIMATIC Information Server 2022
Update to V2022 SP1 Update 2 or later version To update, use the Information Server version as bundled with PCS neo V5.0 Update 1 (<https://support.industry.siemens.com/cs/ww/en/view/109977244/>)
- BehobenSIMATIC PCS 7 V9.1
Update to V9.1 SP2 UC06 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812242/ - BehobenSIMATIC Process Historian 2020
Update to V2020 SP2 Update 5 or later version
- BehobenSIMATIC Process Historian 2022
Update to V2022 SP1 Update 2 or later version To update, use the Process Historian version as bundled with PCS neo V5.0 Update 1 (<https://support.industry.siemens.com/cs/ww/en/view/109977244/>)
- BehobenSIMATIC WinCC Runtime Professional V18
Update to V18 Update 5 or later version
- BehobenSIMATIC WinCC Runtime Professional V19
Update to V19 Update 3 or later version
- BehobenSIMATIC WinCC V7.5
Update to V7.5 SP2 Update 18 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793460/ - BehobenSIMATIC WinCC V8.0
Update to V8.0 Update 5 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan