Description (CNA)
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Opcenter Quality | affected 0 before V2406 |
| Siemens / Opcenter RDnL | affected 0 before V2410 |
| Siemens / SIMATIC PCS neo V4.0 | affected 0 before * |
| Siemens / SIMATIC PCS neo V4.1 | affected 0 before V4.1 Update 2 |
| Siemens / SIMATIC PCS neo V5.0 | affected 0 before V5.0 Update 1 |
| Siemens / SINEC NMS | affected 0 before * |
| Siemens / SINEMA Remote Connect Client | affected 0 before V3.2 SP3 |
| Siemens / Totally Integrated Automation Portal (TIA Portal) V16 | affected 0 before * |
| Siemens / Totally Integrated Automation Portal (TIA Portal) V17 | affected 0 before V17 Update 8 |
| Siemens / Totally Integrated Automation Portal (TIA Portal) V18 | affected 0 before V18 Update 5 |
| Siemens / Totally Integrated Automation Portal (TIA Portal) V19 | affected 0 before V19 Update 3 |
CWE
CWE-122
References
ADP enrichment
No English description supplied.
No references supplied.