The vulnerabilities of the OPC UA server software of the SIMATIC Energy Manager Basic and SIMATIC Energy Manager PRO systems, as well as the SIMATIC IPC DiagBase micro-programming device, and the SIMIT simulation modeling software, allow a malicious actor to trigger maintenance failures.

The vulnerability of the OPC UA server of the SIMATIC Energy Manager Basic and SIMATIC Energy Manager PRO systems, as well as the SIMATIC IPC DiagBase micro-programming device, and the SIMIT simulation software, is related to improper management of sequential memory distribution. Exploiting this...