CVE-2023-46284

A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...

CVE-2023-46284

Opcenter components and Siemens TIAP stack are affected by CVE-2023-46284, a buffer overflow (out-of-bounds write) in handling requests on ports 4002/tcp and 4004/tcp that can crash the target application (denial of service) with auto-restart of the service. Affected products/versions include: Op...

CVE-2023-46283

The CVE-2023-46283 issue affects Opcenter Execution Foundation (< V2407), Opcenter Quality (< V2312), SIMATIC PCS neo (< V4.1), SINEC NMS (

CVE-2023-46283

A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...

CVE-2023-46282

Siemens Opcenter/TIA Portal family is affected by a reflected XSS in the web UI across multiple products and versions: Opcenter Execution Foundation < V2407, Opcenter Quality < V2312, SIMATIC PCS N eo < V4.1, SINEC NMS < V2.0 SP1, and TIA Portal V14, V15.1, V16, V17 < V17 Update 8,...

CVE-2023-46281

A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...

CVE-2023-46281

A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...

CVE-2023-46281

CVE-2023-46281 affects Siemens/Opcenter UMC across multiple products, due to an overly permissive cross-domain policy in the UMC Web-UI. Affected versions include Opcenter Execution Foundation < V2407, Opcenter Quality < V2312, SIMATIC PCS neo < V4.1, SINEC NMS < V2.0 SP1, and TIAs: P...

CVE-2023-38380

A vulnerability has been identified in SIMATIC CP 1242-7 V2 incl. SIPLUS variants All versions = V6.1 V6.1 HF2, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions V2.3, SIPLUS ET 200SP CP 1543SP-1 ISEC 6AG1543-6WX00-7XE0 All versions V2.3, SIPLUS ET 200SP CP 1543SP-1 ISEC TX...

CVE-2023-38380

CVE-2023-38380 describes a denial-of-service vulnerability in the webserver implementations of Siemens SIMATIC/SIPLUS devices (e.g., CP 1242/1243 family, CP 1542/1543 variants, SINAMICS S210, SIPLUS NET CP 1543-1, etc.). The root cause is that the webserver fails to correctly release allocated me...

CVE-2022-47375

CVE-2022-47375 applies to Siemens SIMATIC/SIPLUS line, notably SIMATIC PC-Station Plus and S7-400 CPU variants, plus SINAMICS S120 (and SIPLUS) prior to SP3 HF15. The vulnerability is caused by improper handling of long file names in the web server, enabling a buffer overflow that can lead to a d...

CVE-2022-47374

A vulnerability has been identified in SIMATIC PC-Station Plus All versions, SIMATIC S7-400 CPU 412-2 PN V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 414F-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 416-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 416F-3 PN/D...

CVE-2022-47374

A vulnerability has been identified in SIMATIC PC-Station Plus All versions, SIMATIC S7-400 CPU 412-2 PN V7 All versions, SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 414F-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 416-3 PN/DP V7 All versions, SIMATIC S7-400 CPU 416F-3 PN/D...

CVE-2022-47374

CVE-2022-47374 affects Siemens SIMATIC PC-Station Plus and multiple S7-400/SIPLUS variants, plus SINAMICS S120. The issue is an HTTP(S) web server handling flaw (uncontrolled recursion) that can exhaust resources and cause a denial of service. Affected products include PC-Station Plus; S7-400 CPU...

CVE-2022-46141

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal All versions V19. An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware...

CVE-2022-46141

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal All versions V19. An information disclosure vulnerability could allow a local attacker to gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the hardware...

CVE-2022-46141

CVE-2022-46141 affects SIMATIC STEP 7 (TIA Portal): all versions before V19 are vulnerable to information disclosure that could allow a local attacker to obtain the access level password of S7-1200/S7-1500 CPUs when entered by a legitimate user in the hardware configuration. The Red Hat/Siemens a...

PT-2023-7779 · Siemens · Opcenter Quality +4

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal TIA Portal V14 Totally Integrated...

PT-2023-7780 · Siemens · Opcenter Quality +4

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal TIA Portal V14 Totally Integrated...

PT-2023-7777 · Siemens · Opcenter Quality +4

Name of the Vulnerable Software and Affected Versions: Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal TIA Portal V14 Totally Integrated...