{"id":"CVE-2024-33698","state":"PUBLISHED","title":"A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All","description":"A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.","publishedAt":"2024-09-10T09:36:31.009Z","updatedAt":"2025-10-14T09:15:00.448Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"siemens"},"assigner":"siemens","products":["Siemens Opcenter Quality","Siemens Opcenter RDnL","Siemens SIMATIC PCS neo V4.0","Siemens SIMATIC PCS neo V4.1","Siemens SIMATIC PCS neo V5.0","Siemens SINEC NMS","Siemens SINEMA Remote Connect Client","Siemens Totally Integrated Automation Portal (TIA Portal) V16","Siemens Totally Integrated Automation Portal (TIA Portal) V17","Siemens Totally Integrated Automation Portal (TIA Portal) V18","Siemens Totally Integrated Automation Portal (TIA Portal) V19"],"affected":[{"vendor":"Siemens","product":"Opcenter Quality","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2406","versionType":"custom"}]},{"vendor":"Siemens","product":"Opcenter RDnL","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2410","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V4.0","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V4.1","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V4.1 Update 2","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V5.0","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V5.0 Update 1","versionType":"custom"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SINEMA Remote Connect Client","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V3.2 SP3","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V16","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V17","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V17 Update 8","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V18","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V18 Update 5","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V19","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V19 Update 3","versionType":"custom"}]}],"references":["https://cert-portal.siemens.com/productcert/html/ssa-039007.html"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/33xxx/CVE-2024-33698.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-33698","state":"PUBLISHED","datePublished":"2024-09-10T09:36:31.009Z","dateUpdated":"2025-10-14T09:15:00.448Z","assignerShortName":"siemens","assignerOrgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateReserved":"2024-04-26T12:32:09.263Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code."}],"affected":[{"vendor":"Siemens","product":"Opcenter Quality","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2406","versionType":"custom"}]},{"vendor":"Siemens","product":"Opcenter RDnL","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V2410","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V4.0","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V4.1","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V4.1 Update 2","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC PCS neo V5.0","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V5.0 Update 1","versionType":"custom"}]},{"vendor":"Siemens","product":"SINEC NMS","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"SINEMA Remote Connect Client","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V3.2 SP3","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V16","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V17","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V17 Update 8","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V18","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V18 Update 5","versionType":"custom"}]},{"vendor":"Siemens","product":"Totally Integrated Automation Portal (TIA Portal) V19","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V19 Update 3","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-039007.html"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL"}},{"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseScore":9.3,"baseSeverity":"CRITICAL"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","lang":"en","description":"CWE-122: Heap-based Buffer Overflow","type":"CWE"}]}],"providerMetadata":{"shortName":"siemens","orgId":"cec7a2ec-15b4-4faf-bd53-b40f371f3a77","dateUpdated":"2025-10-14T09:15:00.448Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"siemens","product":"simatic_pcs_neo","defaultStatus":"unknown","versions":[{"version":"4.0","status":"affected","lessThan":"4.1_update_2","versionType":"custom"}],"cpes":["cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:*"]},{"vendor":"siemens","product":"simatic_information_server","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}],"cpes":["cpe:2.3:a:siemens:totally_integrated_automation_portal:16:*:*:*:*:*:*:*","cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:*","cpe:2.3:a:siemens:totally_integrated_automation_portal:19:*:*:*:*:*:*:*","cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_pcs_neo:5.0:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_information_server:2022:*:*:*:*:*:*:*","cpe:2.3:a:siemens:simatic_information_server:2024:*:*:*:*:*:*:*"]},{"vendor":"siemens","product":"totally_integrated_automation_portal","defaultStatus":"unknown","versions":[{"version":"17","status":"affected","lessThan":"17_update_8","versionType":"custom"}],"cpes":["cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-10T17:32:07.999463Z","id":"CVE-2024-33698","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-10T18:26:36.889Z"}}]}}}