Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
siemens

Description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Siemens Opcenter Execution Foundation

Default version status: unknown

  • 0 to < V2501.0001affected

Siemens Opcenter Intelligence

Default version status: unknown

  • 0 to < V2501.0001affected

Siemens Opcenter Quality

Default version status: unknown

  • 0 to < V2512affected

Siemens Opcenter RDnL

Default version status: unknown

  • 0 to < V2410affected

Siemens SIMATIC PCS neo V4.0

Default version status: unknown

  • 0 to < *affected

Siemens SIMATIC PCS neo V4.1

Default version status: unknown

  • 0 to < V4.1 Update 3affected

Siemens SIMATIC PCS neo V5.0

Default version status: unknown

  • 0 to < V5.0 Update 1affected

Siemens SINEC NMS

Default version status: unknown

  • 0 to < *affected

Siemens Totally Integrated Automation Portal (TIA Portal) V16

Default version status: unknown

  • 0 to < *affected

Siemens Totally Integrated Automation Portal (TIA Portal) V17

Default version status: unknown

  • 0 to < *affected

Siemens Totally Integrated Automation Portal (TIA Portal) V18

Default version status: unknown

  • 0 to < *affected

Siemens Totally Integrated Automation Portal (TIA Portal) V19

Default version status: unknown

  • 0 to < *affected

References