Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-97279
HistoryDec 13, 2023 - 12:00 a.m.

Siemens User Management Component (UMC) Input Validation Improperity Vulnerability

2023-12-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
siemens
umc
opcenter quality
quality management system
qms
simatic pcs neo
sinumerik
tia portal
input validation
vulnerability
attack
denial of service
cnvd

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Opcenter Quality is a quality management system (QMS) that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system (DCS). the SINUMERIK integrated product suite helps to achieve simple networking of machine tools in the IT of the production environment. Totally Integrated Automation Portal (TIA Portal) is PC software that offers the complete range of Siemens digital automation services, from digital planning and integrated engineering to transparent operation. user Management Component (UMC) is an integrated component that enables centralized system-wide maintenance for users. An improper input validation vulnerability exists in Siemens User Management Component (UMC), which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted message to 4004/tcp.

CPENameOperatorVersion
siemens simatic pcs neolt4.1

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

Related for CNVD-2023-97279