EUVD-2023-50510

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in multiple Opcenter and TIA Portal versions allows Denial-of-Service attacks via input validation.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Opcenter Quality production process management system, the SIMATIC PCS neo technological process management web system, the SINUMERIK Integrate RunMyHMI/Automotive production process automation and management software, and the Totally Integrated Automation Portal (Portal TIA) – all of which are related to insufficient data validation – allow a malicious individual to trigger service failures.	19 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-46285	24 May 202510:45	–	circl
CNNVD	Siemens Opcenter Quality 输入验证错误漏洞	12 Dec 202300:00	–	cnnvd
CNVD	Siemens User Management Component (UMC) Input Validation Improperity Vulnerability	13 Dec 202300:00	–	cnvd
CVE	CVE-2023-46285	12 Dec 202311:27	–	cve
Cvelist	CVE-2023-46285	12 Dec 202311:27	–	cvelist
ICS	Siemens User Management Component (UMC)	12 Dec 202300:00	–	ics
NVD	CVE-2023-46285	12 Dec 202312:15	–	nvd
Prion	Input validation	12 Dec 202312:15	–	prion
Positive Technologies	PT-2023-7778 · Siemens · Opcenter Quality +4	12 Dec 202300:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "0eb2404c-47ca-31d5-9e3f-131e1616fb8c",
        "vendor": {
          "name": "Siemens"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1cebb41a-7c0f-3b6c-8788-33a1504c0fdc",
        "product": {
          "name": "Totally Integrated Automation Portal (TIA Portal) V14"
        },
        "product_version": "0 <*"
      },
      {
        "id": "2ab6d3fb-9b67-31f4-8c0d-abc12db81e48",
        "product": {
          "name": "Totally Integrated Automation Portal (TIA Portal) V15.1"
        },
        "product_version": "0 <*"
      },
      {
        "id": "5b344cdf-79cd-3b65-9cea-ae07ca80b453",
        "product": {
          "name": "Totally Integrated Automation Portal (TIA Portal) V17"
        },
        "product_version": "0 <V17 Update 8"
      },
      {
        "id": "6568c277-2fde-3a80-8ea1-169fa536d8f1",
        "product": {
          "name": "SIMATIC PCS neo"
        },
        "product_version": "0 <V4.1"
      },
      {
        "id": "c31dce39-1e9f-3efc-8276-a3a8c2fdd6ec",
        "product": {
          "name": "Totally Integrated Automation Portal (TIA Portal) V18"
        },
        "product_version": "0 <V18 Update 3"
      },
      {
        "id": "d08e9026-cf71-3058-93a8-8d1e789cc671",
        "product": {
          "name": "SINEC NMS"
        },
        "product_version": "0 <V2.0 SP1"
      },
      {
        "id": "d294aadb-288f-308f-9b00-8d9ede8cff2c",
        "product": {
          "name": "Totally Integrated Automation Portal (TIA Portal) V16"
        },
        "product_version": "0 <*"
      },
      {
        "id": "e131cb40-65b5-3116-b92e-0cbaeef15a9d",
        "product": {
          "name": "Opcenter Execution Foundation"
        },
        "product_version": "0 <V2407"
      },
      {
        "id": "eadfd5fa-7c74-39ae-aa73-13f1ae5106fa",
        "product": {
          "name": "Opcenter Quality"
        },
        "product_version": "0 <V2312"
      }
    ]
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-999588.pdf
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-999588.html

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00213

SSVC