LOW🇵🇱 Wersja polska

CVE-2023-28829

CVSS 3.9v3.1pub. 2023-06-13upd. 2024-11-21

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.

CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

  • Siemens Simatic Net Pc Software

    APP
    Siemens
    14.015.0

  • Siemens Simatic Pcs 7

    APP
    Siemens
    8.29.09.1

  • Siemens Simatic Wincc

    APP
    Siemens
    < 8.0

  • Siemens Sinaut St7sc

    APP
    Siemens
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-25910CRITICAL10.0ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versio...

CVE-2021-40358CRITICAL9.9ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V...

CVE-2019-10922CRITICAL9.8ten sam produkt

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and n...

CVE-2016-5743CRITICAL9.8ten sam produkt

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as d...

CVE-2023-48363HIGH7.1ten sam produkt

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All ...