A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 7), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an improper input validation vulnerability that could allow an attacker to bring the service into a Denial-of-Service state by sending a specifically crafted message to 4004/tcp. The corresponding service is auto-restarted after the crash is detected by a watchdog.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-999588.html | |
| https://cert-portal.siemens.com/productcert/pdf/ssa-999588.pdf | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | (en) A vulnerability has been identified in Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 7), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an improper input validation vulnerability that could allow an attacker to bring the service into a Denial-of-Service state by sending a specifically crafted message to 4004/tcp. The corresponding service is auto-restarted after the crash is detected by a watchdog. |
09 Jan 2024, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All versions < V4.1), SINUMERIK Integrate RunMyHMI /Automotive (All versions), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 7), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an improper input validation vulnerability that could allow an attacker to bring the service into a Denial-of-Service state by sending a specifically crafted message to 4004/tcp. The corresponding service is auto-restarted after the crash is detected by a watchdog. |
15 Dec 2023, 15:55
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| CWE | NVD-CWE-noinfo | |
| First Time |
Siemens totally Integrated Automation Portal
Siemens Siemens simatic Pcs Neo Siemens opcenter Quality Siemens sinumerik Integrate Runmyhmi \/automotive |
|
| CPE | cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:sinumerik_integrate_runmyhmi_\/automotive:-:*:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:18:update_1:*:*:*:*:*:* cpe:2.3:a:siemens:totally_integrated_automation_portal:-:*:*:*:*:*:*:* cpe:2.3:a:siemens:opcenter_quality:-:*:*:*:*:*:*:* |
|
| References | () https://cert-portal.siemens.com/productcert/pdf/ssa-999588.pdf - Patch, Vendor Advisory |
12 Dec 2023, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-12 12:15
Updated : 2024-02-13 09:15
NVD link : CVE-2023-46285
Mitre link : CVE-2023-46285
CVE.ORG link : CVE-2023-46285
JSON object : View
Products Affected
siemens
- opcenter_quality
- sinumerik_integrate_runmyhmi_\/automotive
- simatic_pcs_neo
- totally_integrated_automation_portal
CWE