SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available. Siemens has released products based on the Totally Integrated Automation Portal (TIA Portal) V20 which are not affected by CVE-2024-52051. See the chapter "Additional Information" below for more details.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-52051US | — | — | ||
A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 9), SIMATIC… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (34)
- Kein Fix geplantSIMATIC S7-PLCSIM V17
Currently no fix is planned
- Kein Fix geplantSIMATIC S7-PLCSIM V18
Currently no fix is planned
- Kein Fix verfügbarSIMATIC WinCC Unified PC Runtime V18
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V17
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V18
Currently no fix is available
- Kein Fix verfügbarSIMOCODE ES V19
Currently no fix is available
- Kein Fix verfügbarSIMOTION SCOUT TIA V5.4
Currently no fix is available
- Kein Fix verfügbarSIMOTION SCOUT TIA V5.5
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V17
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V18
Currently no fix is available
- Kein Fix verfügbarSINAMICS Startdrive V19
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V17 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V18 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Safety ES V19 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V17 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V18 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarSIRIUS Soft Starter ES V19 (TIA Portal)
Currently no fix is available
- Kein Fix verfügbarTIA Portal Cloud V17
Currently no fix is available
- Kein Fix verfügbarTIA Portal Cloud V18
Currently no fix is available
- BehobenSIMATIC STEP 7 Safety V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC STEP 7 Safety V18
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - BehobenSIMATIC STEP 7 Safety V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC STEP 7 V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC STEP 7 V18
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - BehobenSIMATIC STEP 7 V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC Unified PC Runtime V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC Unified V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC WinCC Unified V18
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - BehobenSIMATIC WinCC Unified V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC V17
Update to V17 Update 9 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenSIMATIC WinCC V18
Update to V18 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/ - BehobenSIMATIC WinCC V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMOTION SCOUT TIA V5.6
Update to V5.6 SP1 HF7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989067/ - BehobenTIA Portal Cloud V19
TIA Portal Cloud V5.2.1.1 or later version updated TIA Portal to V19 Update 4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan