CVE-2024-33698
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.3epss 1.1%
probabilidad de explotación
1.1%top 37% de las CVE
explotación observada
noninguna fuente lo reporta
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Siemens · Opcenter QualitySiemens · Opcenter RDnLSiemens · SIMATIC PCS neo V4.0Siemens · SIMATIC PCS neo V4.1Siemens · SIMATIC PCS neo V5.0Siemens · SINEC NMSSiemens · SINEMA Remote Connect ClientSiemens · Totally Integrated Automation Portal (TIA Portal) V16Siemens · Totally Integrated Automation Portal (TIA Portal) V17Siemens · Totally Integrated Automation Portal (TIA Portal) V18Siemens · Totally Integrated Automation Portal (TIA Portal) V19