Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-33698

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Opcenter Quality

Default version status: unknown

  • 0 to < V2406affected

Siemens Opcenter RDnL

Default version status: unknown

  • 0 to < V2410affected

Siemens SIMATIC PCS neo V4.0

Default version status: unknown

  • 0 to < *affected

Siemens SIMATIC PCS neo V4.1

Default version status: unknown

  • 0 to < V4.1 Update 2affected

Siemens SIMATIC PCS neo V5.0

Default version status: unknown

  • 0 to < V5.0 Update 1affected

Siemens SINEC NMS

Default version status: unknown

  • 0 to < *affected

Siemens SINEMA Remote Connect Client

Default version status: unknown

  • 0 to < V3.2 SP3affected

Siemens Totally Integrated Automation Portal (TIA Portal) V16

Default version status: unknown

  • 0 to < *affected

Siemens Totally Integrated Automation Portal (TIA Portal) V17

Default version status: unknown

  • 0 to < V17 Update 8affected

Siemens Totally Integrated Automation Portal (TIA Portal) V18

Default version status: unknown

  • 0 to < V18 Update 5affected

Siemens Totally Integrated Automation Portal (TIA Portal) V19

Default version status: unknown

  • 0 to < V19 Update 3affected

References