The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to trigger a service failure and expose the protected information.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

SIMATIC Reader flaw enables service failure and protected data disclosure via faulty certificates.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-37995	10 Sep 202413:23	–	circl
CNNVD	Siemens SIMATIC 安全漏洞	10 Sep 202400:00	–	cnnvd
CNVD	Siemens SIMATIC RFID Readers Mishandling Vulnerability (CNVD-2024-38006)	12 Sep 202400:00	–	cnvd
CVE	CVE-2024-37995	10 Sep 202409:36	–	cve
Cvelist	CVE-2024-37995	10 Sep 202409:36	–	cvelist
EUVD	EUVD-2024-36947	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Siemens products	10 Sep 202418:20	–	ncsc
NVD	CVE-2024-37995	10 Sep 202410:15	–	nvd
Positive Technologies	PT-2024-7405 · Siemens · Simatic Reader Rf615R +11	10 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-37995	23 May 202510:31	–	redhatcve

Vulners

Node

siemens_ag simatic_reader_rf610r_cmiitRange<4.2

OR

siemens_ag reader_rf610r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf610rRange<4.2

OR

siemens_ag simatic_reader_rf615r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf615r_etsRange<4.2

OR

siemens_ag simatic_reader_rf615r_fccRange<4.2

OR

siemens_ag simatic_reader_rf650r_aribRange<4.2

OR

siemens_ag simatic_reader_rf650r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf650r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf650r_fccRange<4.2

OR

siemens_ag simatic_reader_rf680r_aribRange<4.2

OR

siemens_ag simatic_reader_rf680r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf680r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf685r_aribRange<4.2

OR

siemens_ag simatic_reader_rf685r_cmiitRange<4.2

OR

siemens_ag simatic_reader_rf685r_etsiRange<4.2

OR

siemens_ag simatic_reader_rf685r_fccRange<4.2

OR

siemens_ag simatic_rf1140rRange<1.1

OR

siemens_ag simatic_rf1170rRange<2.2

OR

siemens_ag simatic_rf166cRange<2.2

OR

siemens_ag simatic_rf185cRange<2.2

OR

siemens_ag simatic_rf186ciRange<2.2

OR

siemens_ag simatic_rf188cRange<2.2

OR

siemens_ag simatic_rf188ciRange<2.2

OR

siemens_ag simatic_rf360rRange<2.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-37995
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-765405.html
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 32.7

CVSS 24

EPSS0.00258

simatic reader service failure protected data disclosure faulty certificates exception handling