CVE-2023-25910

2023-06-1309:15:16

CWE-94

[email protected]

web.nvd.nist.gov

simatic pcs 7

simatic s7-pm

simatic step 7 v5

vulnerability

cve-2023-25910

database management

remote access

code execution

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:T/RC:C

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.4%

JSON

A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7). The affected product contains a database management system that could allow remote users with low privileges to use embedded functions of the database (local or in a network share) that have impact on the server.

An attacker with network access to the server network could leverage these embedded functions to run code with elevated privileges in the database management system’s server.

Affected configurations

NVD

Node

siemenssimatic_pcs_7

siemenssimatic_s7-pm

siemenssimatic_step_7Range<5.7

CPENameOperatorVersion
siemens:simatic_pcs_7siemens simatic pcs 7eq*
siemens:simatic_s7-pmsiemens simatic s7-pmeq*
siemens:simatic_step_7siemens simatic step 7lt5.7

CPE	Name	Operator	Version
siemens:simatic_pcs_7	siemens simatic pcs 7	eq	*
siemens:simatic_s7-pm	siemens simatic s7-pm	eq	*
siemens:simatic_step_7	siemens simatic step 7	lt	5.7

CNA Affected

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC PCS 7",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V9.1 SP2 UC04",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-PM",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.7 SP1 HF1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC S7-PM",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.7 SP2 HF1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC STEP 7 V5",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]