Vulnerability-Lookup

BDU:2024-05635 (CVE-2023-32735)

Vulnerability from fstec – Published: 2024-07-23 – Updated: 2024-07-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость компонента Configuration Handler программного обеспечения систем автоматизации технологических процессов Totally Integrated Automation Portal (Portal TIA), позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость компонента Configuration Handler программного обеспечения систем автоматизации технологических процессов Totally Integrated Automation Portal (Portal TIA) связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

6.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-502 - Восстановление в памяти недостоверных данных

Aliases

CVE-2023-32735, SSA-779936

References

2 references

URL
https://cert-portal.siemens.com/productcert/html/ssa-779936.html
https://vuldb.com/?id.270647

Impacted products

11 products from 1 vendor

Vendors

Siemens AG

Products

Siemens Totally Integrated Automation Portal (TIA Portal), SIMATIC STEP 7 Safety, SIMATIC STEP 7 (TIA Portal), SIMATIC WinCC Unified, SIMATIC WinCC, SIMOCODE ES, SINAMICS Startdrive, Soft Starter ES, SIMOTION SCOUT TIA, TIA Portal Cloud, SIRIUS Safety ES

Versions

16 (Siemens Totally Integrated Automation Portal (TIA Portal)), 17 (Siemens Totally Integrated Automation Portal (TIA Portal)), 18 (Siemens Totally Integrated Automation Portal (TIA Portal)), от 16 до 16 Update 7 (SIMATIC STEP 7 Safety), от 17 до 17 Update 7 (SIMATIC STEP 7 Safety), от 18 до 18 Update 2 (SIMATIC STEP 7 Safety), от 16 до 16 Update 7 (SIMATIC STEP 7 (TIA Portal)), от 17 до 17 Update 7 (SIMATIC STEP 7 (TIA Portal)), от 18 до 18 Update 2 (SIMATIC STEP 7 (TIA Portal)), от 16 до 16 Update 7 (SIMATIC WinCC Unified), от 17 до 17 Update 7 (SIMATIC WinCC Unified), от 18 до 18 Update 2 (SIMATIC WinCC Unified), от 16 до 16.7 (SIMATIC WinCC), от 17 до 17.7 (SIMATIC WinCC), от 18 до 18 Update 2 (SIMATIC WinCC), от 16 до 16 Update 7 (SIMOCODE ES), от 17 до 17 Update 7 (SIMOCODE ES), от 18 до 18 Update 2 (SIMOCODE ES), 16 (SINAMICS Startdrive), 17 (SINAMICS Startdrive), 18 (SINAMICS Startdrive), от 16 до 16 Update 7 (Soft Starter ES), от 17 до 17 Update 7 (Soft Starter ES), от 18 до 18 Update 2 (Soft Starter ES), 5.4 SP1 (SIMOTION SCOUT TIA), 5.4 SP3 (SIMOTION SCOUT TIA), 5.5 SP1 (SIMOTION SCOUT TIA), от 3.0 до 18 Update 2 (TIA Portal Cloud), от 17 до 17 Update 7 (SIRIUS Safety ES), от 18 до 18 Update 2 (SIRIUS Safety ES)

Product types

ПО программно-аппаратного средства АСУ ТП, Application software, Industrial control system software, Appliance software, Средство АСУ ТП, Firmware

Mitigations

Использование рекомендаций: https://cert-portal.siemens.com/productcert/html/ssa-779936.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16 (Siemens Totally Integrated Automation Portal (TIA Portal)), 17 (Siemens Totally Integrated Automation Portal (TIA Portal)), 18 (Siemens Totally Integrated Automation Portal (TIA Portal)), \u043e\u0442 16 \u0434\u043e 16 Update 7 (SIMATIC STEP 7 Safety), \u043e\u0442 17 \u0434\u043e 17 Update 7 (SIMATIC STEP 7 Safety), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIMATIC STEP 7 Safety), \u043e\u0442 16 \u0434\u043e 16 Update 7 (SIMATIC STEP 7 (TIA Portal)), \u043e\u0442 17 \u0434\u043e 17 Update 7 (SIMATIC STEP 7 (TIA Portal)), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIMATIC STEP 7 (TIA Portal)), \u043e\u0442 16 \u0434\u043e 16 Update 7 (SIMATIC WinCC Unified), \u043e\u0442 17 \u0434\u043e 17 Update 7 (SIMATIC WinCC Unified), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIMATIC WinCC Unified), \u043e\u0442 16 \u0434\u043e 16.7 (SIMATIC WinCC), \u043e\u0442 17 \u0434\u043e 17.7 (SIMATIC WinCC), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIMATIC WinCC), \u043e\u0442 16 \u0434\u043e 16 Update 7 (SIMOCODE ES), \u043e\u0442 17 \u0434\u043e 17 Update 7 (SIMOCODE ES), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIMOCODE ES), 16 (SINAMICS Startdrive), 17 (SINAMICS Startdrive), 18 (SINAMICS Startdrive), \u043e\u0442 16 \u0434\u043e 16 Update 7 (Soft Starter ES), \u043e\u0442 17 \u0434\u043e 17 Update 7 (Soft Starter ES), \u043e\u0442 18 \u0434\u043e 18 Update 2 (Soft Starter ES), 5.4 SP1 (SIMOTION SCOUT TIA), 5.4 SP3 (SIMOTION SCOUT TIA), 5.5 SP1 (SIMOTION SCOUT TIA), \u043e\u0442 3.0 \u0434\u043e 18 Update 2 (TIA Portal Cloud), \u043e\u0442 17 \u0434\u043e 17 Update 7 (SIRIUS Safety ES), \u043e\u0442 18 \u0434\u043e 18 Update 2 (SIRIUS Safety ES)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://cert-portal.siemens.com/productcert/html/ssa-779936.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.07.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-05635",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-32735, SSA-779936",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Siemens Totally Integrated Automation Portal (TIA Portal), SIMATIC STEP 7 Safety, SIMATIC STEP 7 (TIA Portal), SIMATIC WinCC Unified, SIMATIC WinCC, SIMOCODE ES, SINAMICS Startdrive, Soft Starter ES, SIMOTION SCOUT TIA, TIA Portal Cloud, SIRIUS Safety ES",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Configuration Handler \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 Totally Integrated Automation Portal (Portal TIA), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-502)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Configuration Handler \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 Totally Integrated Automation Portal (Portal TIA) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441  \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cert-portal.siemens.com/productcert/html/ssa-779936.html\nhttps://vuldb.com/?id.270647",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-502",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)"
}

CVE-2023-32735 (GCVE-0-2023-32735)

Vulnerability from cvelistv5 – Published: 2024-07-09 12:04 – Updated: 2025-08-27 20:32

Summary

A vulnerability has been identified in SIMATIC STEP 7 Safety V16 (All versions < V16 Update 7), SIMATIC STEP 7 Safety V17 (All versions < V17 Update 7), SIMATIC STEP 7 Safety V18 (All versions < V18 Update 2), SIMATIC STEP 7 V16 (All versions < V16 Update 7), SIMATIC STEP 7 V17 (All versions < V17 Update 7), SIMATIC STEP 7 V18 (All versions < V18 Update 2), SIMATIC WinCC Unified V16 (All versions < V16 Update 7), SIMATIC WinCC Unified V17 (All versions < V17 Update 7), SIMATIC WinCC Unified V18 (All versions < V18 Update 2), SIMATIC WinCC V16 (All versions < V16.7), SIMATIC WinCC V17 (All versions < V17.7), SIMATIC WinCC V18 (All versions < V18 Update 2), SIMOCODE ES V16 (All versions < V16 Update 7), SIMOCODE ES V17 (All versions < V17 Update 7), SIMOCODE ES V18 (All versions < V18 Update 2), SIMOTION SCOUT TIA V5.4 SP1 (All versions), SIMOTION SCOUT TIA V5.4 SP3 (All versions), SIMOTION SCOUT TIA V5.5 SP1 (All versions), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SIRIUS Safety ES V17 (All versions < V17 Update 7), SIRIUS Safety ES V18 (All versions < V18 Update 2), SIRIUS Soft Starter ES V17 (All versions < V17 Update 7), SIRIUS Soft Starter ES V18 (All versions < V18 Update 2), Soft Starter ES V16 (All versions < V16 Update 7), TIA Portal Cloud V3.0 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing hardware configuration profiles. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

7 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-09 19:09 UTC

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

41 products

Vendor	Product	Version
Siemens	SIMATIC STEP 7 Safety V16	Affected: 0 , < V16 Update 7 (custom)
Siemens	SIMATIC STEP 7 Safety V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIMATIC STEP 7 Safety V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIMATIC STEP 7 V16	Affected: 0 , < V16 Update 7 (custom)
Siemens	SIMATIC STEP 7 V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIMATIC STEP 7 V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIMATIC WinCC Unified V16	Affected: 0 , < V16 Update 7 (custom)
Siemens	SIMATIC WinCC Unified V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIMATIC WinCC Unified V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIMATIC WinCC V16	Affected: 0 , < V16.7 (custom)
Siemens	SIMATIC WinCC V17	Affected: 0 , < V17.7 (custom)
Siemens	SIMATIC WinCC V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIMOCODE ES V16	Affected: 0 , < V16 Update 7 (custom)
Siemens	SIMOCODE ES V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIMOCODE ES V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIMOTION SCOUT TIA V5.4 SP1	Affected: 0 , < * (custom)
Siemens	SIMOTION SCOUT TIA V5.4 SP3	Affected: 0 , < * (custom)
Siemens	SIMOTION SCOUT TIA V5.5 SP1	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V16	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V17	Affected: 0 , < * (custom)
Siemens	SINAMICS Startdrive V18	Affected: 0 , < * (custom)
Siemens	SIRIUS Safety ES V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIRIUS Safety ES V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	SIRIUS Soft Starter ES V17	Affected: 0 , < V17 Update 7 (custom)
Siemens	SIRIUS Soft Starter ES V18	Affected: 0 , < V18 Update 2 (custom)
Siemens	Soft Starter ES V16	Affected: 0 , < V16 Update 7 (custom)
Siemens	TIA Portal Cloud V3.0	Affected: 0 , < V18 Update 2 (custom)
siemens	simatic_step_7_safety	Affected: 0 , < v16update7 (custom) Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:simatic_step_7_safety::::::::
siemens	simatic_step_7	Affected: 0 , < v16update7 (custom) Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:simatic_step_7::::::::
siemens	simatic_wincc_unified	Affected: 0 , < v16update7 (custom) Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:simatic_wincc_unified::::::::
siemens	simatic_wincc	Affected: 0 , < v17.7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:simatic_wincc::::::::
siemens	simocode_es	Affected: 0 , < v16update7 (custom) Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:simocode_es::::::::
siemens	simotion_scout_tia	Affected: v5.4sp1 cpe:2.3:a:siemens:simotion_scout_tia:v5.4sp1:::::::*
siemens	simotion_scout_tia	Affected: v5.4sp3 cpe:2.3:a:siemens:simotion_scout_tia:v5.4sp3:::::::*
siemens	simotion_scout_tia	Affected: v5.5sp1 cpe:2.3:a:siemens:simotion_scout_tia:v5.5sp1:::::::*
siemens	sinamics_startdrive	Affected: v17 cpe:2.3:a:siemens:sinamics_startdrive:v17:::::::*
siemens	sinamics_startdrive	Affected: v18 cpe:2.3:a:siemens:sinamics_startdrive:v18:::::::*
siemens	sirius_safety_es	Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:sirius_safety_es::::::::
siemens	sirius_soft_starter_es	Affected: 0 , < v17update7 (custom) Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:sirius_soft_starter_es::::::::
siemens	soft_starter_es	Affected: 0 , < v16update7 (custom) cpe:2.3:a:siemens:soft_starter_es::::::::
siemens	tia_portal_cloud_v3.0	Affected: 0 , < v18update2 (custom) cpe:2.3:a:siemens:tia_portal_cloud_v3.0::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7_safety:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7_safety",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7_safety:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7_safety",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7_safety:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7_safety",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_step_7",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_wincc_unified:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_wincc_unified",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_wincc_unified:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_wincc_unified",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_wincc_unified:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_wincc_unified",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_wincc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simatic_wincc",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simocode_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simocode_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simocode_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simocode_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simocode_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simocode_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simotion_scout_tia:v5.4sp1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simotion_scout_tia",
            "vendor": "siemens",
            "versions": [
              {
                "status": "affected",
                "version": "v5.4sp1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simotion_scout_tia:v5.4sp3:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simotion_scout_tia",
            "vendor": "siemens",
            "versions": [
              {
                "status": "affected",
                "version": "v5.4sp3"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:simotion_scout_tia:v5.5sp1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "simotion_scout_tia",
            "vendor": "siemens",
            "versions": [
              {
                "status": "affected",
                "version": "v5.5sp1"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sinamics_startdrive:v17:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sinamics_startdrive",
            "vendor": "siemens",
            "versions": [
              {
                "status": "affected",
                "version": "v17"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sinamics_startdrive:v18:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sinamics_startdrive",
            "vendor": "siemens",
            "versions": [
              {
                "status": "affected",
                "version": "v18"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sirius_safety_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sirius_safety_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sirius_safety_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sirius_safety_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sirius_soft_starter_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sirius_soft_starter_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:sirius_soft_starter_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "sirius_soft_starter_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v17update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:soft_starter_es:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "soft_starter_es",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v16update7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:siemens:tia_portal_cloud_v3.0:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "tia_portal_cloud_v3.0",
            "vendor": "siemens",
            "versions": [
              {
                "lessThan": "v18update2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32735",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-09T19:09:33.343230Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-27T20:32:53.425Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:25:36.815Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-779936.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 Safety V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 Safety V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 Safety V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC STEP 7 V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC Unified V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC Unified V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC Unified V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMATIC WinCC V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOCODE ES V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.4 SP1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.4 SP3",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIMOTION SCOUT TIA V5.5 SP1",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SINAMICS Startdrive V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "*",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Safety ES V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V17",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V17 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "SIRIUS Soft Starter ES V18",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Soft Starter ES V16",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V16 Update 7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "TIA Portal Cloud V3.0",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V18 Update 2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIMATIC STEP 7 Safety V16 (All versions \u003c V16 Update 7), SIMATIC STEP 7 Safety V17 (All versions \u003c V17 Update 7), SIMATIC STEP 7 Safety V18 (All versions \u003c V18 Update 2), SIMATIC STEP 7 V16 (All versions \u003c V16 Update 7), SIMATIC STEP 7 V17 (All versions \u003c V17 Update 7), SIMATIC STEP 7 V18 (All versions \u003c V18 Update 2), SIMATIC WinCC Unified V16 (All versions \u003c V16 Update 7), SIMATIC WinCC Unified V17 (All versions \u003c V17 Update 7), SIMATIC WinCC Unified V18 (All versions \u003c V18 Update 2), SIMATIC WinCC V16 (All versions \u003c V16.7), SIMATIC WinCC V17 (All versions \u003c V17.7), SIMATIC WinCC V18 (All versions \u003c V18 Update 2), SIMOCODE ES V16 (All versions \u003c V16 Update 7), SIMOCODE ES V17 (All versions \u003c V17 Update 7), SIMOCODE ES V18 (All versions \u003c V18 Update 2), SIMOTION SCOUT TIA V5.4 SP1 (All versions), SIMOTION SCOUT TIA V5.4 SP3 (All versions), SIMOTION SCOUT TIA V5.5 SP1 (All versions), SINAMICS Startdrive V16 (All versions), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SIRIUS Safety ES V17 (All versions \u003c V17 Update 7), SIRIUS Safety ES V18 (All versions \u003c V18 Update 2), SIRIUS Soft Starter ES V17 (All versions \u003c V17 Update 7), SIRIUS Soft Starter ES V18 (All versions \u003c V18 Update 2), Soft Starter ES V16 (All versions \u003c V16 Update 7), TIA Portal Cloud V3.0 (All versions \u003c V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing hardware configuration profiles. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.\r\n\r\nThis is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-09T12:04:26.871Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-779936.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2023-32735",
    "datePublished": "2024-07-09T12:04:26.871Z",
    "dateReserved": "2023-05-12T13:16:47.721Z",
    "dateUpdated": "2025-08-27T20:32:53.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

SSA-779936

Vulnerability from csaf_siemens - Published: 2024-07-09 00:00 - Updated: 2024-07-09 00:00

Summary

SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19

Scope

1 vulnerability in this advisory.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2024-05635 (CVE-2023-32735)

CVE-2023-32735 (GCVE-0-2023-32735)

SSA-779936

Tags

Sightings

Nomenclature

Related by attack behaviour