The vulnerability in the implementation of the RPC (Remote Procedure Call) protocol of Siemens’ process control systems such as SIMATIC PCS 7, OpenPCS 7, and Siemens’ SCADA system SIMATIC WinCC allows a attacker to trigger maintenance failures.

🗓️ 15 Apr 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 10 Views

RPC implementation flaw in Siemens SIMATIC process control systems can trigger remote maintenance failures.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-48364	13 Feb 202410:21	–	circl
CNNVD	Siemens SIMATIC WinCC和Siemens SIMATIC PCS 安全漏洞	13 Feb 202400:00	–	cnnvd
CNVD	Multiple Siemens Products Null Pointer Dereference Vulnerability (CNVD-2024-09314)	21 Feb 202400:00	–	cnvd
CVE	CVE-2023-48364	13 Feb 202408:59	–	cve
Cvelist	CVE-2023-48364	13 Feb 202408:59	–	cvelist
EUVD	EUVD-2023-52418	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC WinCC, OpenPCS	13 Feb 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	13 Feb 202400:00	–	ncsc
NVD	CVE-2023-48364	13 Feb 202409:15	–	nvd
OSV	CVE-2023-48364	13 Feb 202409:15	–	osv

Vulners

Node

OR

siemens_ag simatic_winccMatch7.4

siemens_ag simatic_pcs_7Match9.1

siemens_ag simatic_wincc_runtime_professionalMatch19

siemens_ag simatic_wincc_runtime_professionalMatch18

siemens_ag simatic_route_controlMatch9.1

siemens_ag simatic_batchMatch9.1

siemens_ag openpcs_7Match9.1

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-753746.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2024022016
web	www.web.nvd.nist.gov/view/vuln/detail

15 Apr 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.1

CVSS 36.5

EPSS0.0027

simatic process control openpcs remote procedure call pointer assignment error maintenance failures service interruptions wincc system