CVE-2024-45386

🗓️ 11 Feb 2025 10:28:44Reported by siemensType

Vulnerability in SIMATIC PCS and related products allows session token reuse after logout.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability in the SIMATIC PCS neo web-based system for managing technological processes, as well as in the TIA Administrator software environment for developing software and the Totally Integrated Automation Portal (Portal TIA) environment for automating technological processes, is related to an incorrect session expiration time. This allows a hacker to bypass the authentication process.	23 May 202500:00	–	bdu_fstec
Circl	CVE-2024-45386	11 Feb 202510:39	–	circl
CNNVD	Siemens SIMATIC PCS和Siemens TIA Administrator 代码问题漏洞	11 Feb 202500:00	–	cnnvd
CVE	CVE-2024-45386	11 Feb 202510:28	–	cve
EUVD	EUVD-2025-4986	3 Oct 202520:07	–	euvd
ICS	Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal	11 Feb 202500:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	11 Feb 202519:40	–	ncsc
NCSC	Vulnerabilities fixed in Siemens products	14 Feb 202508:46	–	ncsc
NVD	CVE-2024-45386	11 Feb 202511:15	–	nvd
Rapid7 Vulnerability Database (full)	CVE-2024-45386: Insufficient Session Expiration	11 Feb 202500:00	–	rapid7

[
  {
    "vendor": "Siemens",
    "product": "SIMATIC PCS neo V4.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC PCS neo V4.1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V4.1 Update 2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMATIC PCS neo V5.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V5.0 Update 1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIMOCODE ES V19",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V19 Update 1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIRIUS Safety ES V19 (TIA Portal)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V19 Update 1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "SIRIUS Soft Starter ES V19 (TIA Portal)",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V19 Update 1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "TIA Administrator",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V3.0.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-342348.html

11 Feb 2025 10:28Current

CVSS 48.7

CVSS 3.18.8

EPSS0.00556

SSVC

CWE-613