CVE-2024-49849: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...

The vulnerability of microprogrammed communication module software of SIMATIC CP 1543-1, related to incorrect authorization, allows a intruder to circumvent existing security restrictions.

The vulnerability of the microprogramming software for the SIMATIC CP 1543-1 communication modules is related to incorrect authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...

Siemens SIMATIC CP 1543-1 Authorization Error Vulnerability

SIMATIC CP 1543-1 communication processors connect SIMATIC S7-1500 controllers to Ethernet networks. They provide integrated security features such as firewalls, virtual private networks VPNs, and support other protocols with data encryption. An authorization error vulnerability exists in the...

Siemens SIMATIC CP Incorrect Authorization (CVE-2024-50310)

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem. This plugin only works with...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in various products such as Mendix, RUGGEDCOM, SCALANCE, SIMATIC and SINEC. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Cross-Site Scripting XSS. -...

CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

CVE-2023-32736

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 8, SIMATIC STEP 7 Safety V18 All versions V18 Update 5, SIMATIC STEP 7 V16 All versions, SIMATIC...

CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

CVE-2024-50310

The CVE-2024-50310 issue affects Siemens SIMATIC CP 1543-1 (V4.0) with firmware versions 4.0.44 through 4.0.49, where improper authorization could allow an unauthenticated remote attacker to access the filesystem. Public sources in connected documents specify remediation to update to version 4.0....

CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

CVE-2023-32736

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 8, SIMATIC STEP 7 Safety V18 All versions V18 Update 5, SIMATIC STEP 7 V16 All versions, SIMATIC...

CVE-2023-32736

CVE-2023-32736 affects a wide range of Siemens products (e.g., SIMATIC S7-PLCSIM, STEP 7, WinCC, SINAMICS Startdrive, SIRIUS, TIA Portal Cloud, etc.). Affected software does not properly sanitize user-controllable input when parsing user settings, enabling type confusion and arbitrary code execut...

CVE-2023-32736

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 8, SIMATIC STEP 7 Safety V18 All versions V18 Update 5, SIMATIC STEP 7 V16 All versions, SIMATIC...

CVE-2024-50310: Incorrect Authorization

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

Siemens多款产品 代码问题漏洞

SIMATIC S7-PLCSIM simulates the S7-1200, S7-1500 and a number of other PLC derivatives shipped as part of SIMATIC STEP 7. simatic step7 TIA Portal is an engineering software package for configuring and programming SIMATIC controllers. simmocode ES is the simmocode ES is the core software package...

CVE-2023-32736: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 8, SIMATIC STEP 7 Safety V18 All versions V18 Update 5, SIMATIC STEP 7 V16 All versions, SIMATIC...

PT-2024-8716

Name of the Vulnerable Software and Affected Versions SIMATIC CP 1543-1 versions 4.0.44 through 4.0.49 Description The issue is related to improper authorization handling in the SIMATIC CP 1543-1 communication module's firmware. This could allow an unauthenticated remote attacker to bypass existi...

The vulnerability of the storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the data storage manager Adaptec Maxview for industrial computers SIMATIC IPC1047, SIMATIC IPC1047E, SIMATIC IPC647D, and SIMATIC IPC647E is related to the use of a non-unique TLS certificate. Exploiting this vulnerability allows attackers to carry out “man-in-the-middle”...

The vulnerability of the web server of the microprogramming software for communication modules of SIMATIC CP, TIM 1531 IRC, allows a perpetrator to cause service failures.

The vulnerability of the web server of the microprogramming software for communication modules of SIMATIC CP, TIM 1531 IRC, is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...