{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges.\n\nSiemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-629254.html"
      },
      {
        "category": "self",
        "summary": "SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-629254.json"
      }
    ],
    "title": "SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems",
    "tracking": {
      "current_release_date": "2025-01-14T00:00:00Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-629254",
      "initial_release_date": "2024-09-10T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-09-10T00:00:00Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2024-10-08T00:00:00Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added fix information for  SIMATIC WinCC Runtime Professional V19  and updated fix information for SIMATIC PCS 7 V9.1"
        },
        {
          "date": "2024-11-12T00:00:00Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added fix information for SIMATIC WinCC Runtime Professional V18"
        },
        {
          "date": "2025-01-14T00:00:00Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fix information for SIMATIC Information Server 2022 and SIMATIC Process Historian 2022"
        }
      ],
      "status": "interim",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC BATCH V9.1",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC BATCH V9.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V2020 SP2 Update 5",
                "product": {
                  "name": "SIMATIC Information Server 2020",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Information Server 2020"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V2022 SP1 Update 2",
                "product": {
                  "name": "SIMATIC Information Server 2022",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Information Server 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V9.1 SP2 UC06",
                "product": {
                  "name": "SIMATIC PCS 7 V9.1",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC PCS 7 V9.1"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V2020 SP2 Update 5",
                "product": {
                  "name": "SIMATIC Process Historian 2020",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Process Historian 2020"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V2022 SP1 Update 2",
                "product": {
                  "name": "SIMATIC Process Historian 2022",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Process Historian 2022"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V18 Update 5",
                "product": {
                  "name": "SIMATIC WinCC Runtime Professional V18",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC Runtime Professional V18"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V19 Update 3",
                "product": {
                  "name": "SIMATIC WinCC Runtime Professional V19",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC Runtime Professional V19"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC WinCC V7.4",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V7.4"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V7.5 SP2 Update 18",
                "product": {
                  "name": "SIMATIC WinCC V7.5",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V7.5"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "All versions \u003c V8.0 Update 5",
                "product": {
                  "name": "SIMATIC WinCC V8.0",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC WinCC V8.0"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-35783",
      "cwe": {
        "id": "CWE-250",
        "name": "Execution with Unnecessary Privileges"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11"
        ]
      },
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "9"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V18 Update 5 or later version",
          "product_ids": [
            "7"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V19 Update 3 or later version",
          "product_ids": [
            "8"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2020 SP2 Update 5 or later version",
          "product_ids": [
            "5"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2020 SP2 Update 5 or later version",
          "product_ids": [
            "2"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2022 SP1 Update 2 or later version\nTo update, use the Process Historian version as bundled with PCS neo V5.0 Update 1 (\u003chttps://support.industry.siemens.com/cs/ww/en/view/109977244/\u003e)",
          "product_ids": [
            "6"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V2022 SP1 Update 2 or later version\nTo update, use the Information Server version as bundled with PCS neo V5.0 Update 1 (\u003chttps://support.industry.siemens.com/cs/ww/en/view/109977244/\u003e)",
          "product_ids": [
            "3"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V7.5 SP2 Update 18 or later version",
          "product_ids": [
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109793460/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V8.0 Update 5 or later version",
          "product_ids": [
            "11"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V9.1 SP2 UC06 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109812242/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to PCS7 V9.1 SP2 UC06 or later version\n\nhttps://support.industry.siemens.com/cs/ww/en/view/109812242/",
          "product_ids": [
            "1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11"
          ]
        }
      ],
      "title": "CVE-2024-35783"
    }
  ]
}