Description
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer when handling specific requests on port 4002/tcp and 4004/tcp. This could allow an attacker to crash the application. The corresponding service is auto-restarted after the crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Siemens Opcenter Execution Foundation
Default version status: unknown
0 to < V2407affected
Siemens Opcenter Quality
Default version status: unknown
0 to < V2312affected
Siemens SIMATIC PCS neo
Default version status: unknown
0 to < V4.1affected
Siemens SINEC NMS
Default version status: unknown
0 to < V2.0 SP1affected
Siemens Totally Integrated Automation Portal (TIA Portal) V14
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V15.1
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V16
Default version status: unknown
0 to < *affected
Siemens Totally Integrated Automation Portal (TIA Portal) V17
Default version status: unknown
0 to < V17 Update 8affected
Siemens Totally Integrated Automation Portal (TIA Portal) V18
Default version status: unknown
0 to < V18 Update 3affected