A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1)
Published Jul 9, 2024
5.3
MEDIUMCVSS 3.1
EPSS 0.46%
Description
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.
Affected products
-
- Version 0StatusaffectedConstraints<V7.5
- Version
-
- Version 0StatusaffectedConstraints<V7.5
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<*
- Version
-
- Version 0StatusaffectedConstraints<V11.1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | SIMATIC Energy Manager Basic | n/a |
| ||||||
| Siemens | SIMATIC Energy Manager PRO | n/a |
| ||||||
| Siemens | SIMATIC IPC DiagBase | n/a |
| ||||||
| Siemens | SIMATIC IPC DiagMonitor | n/a |
| ||||||
| Siemens | Simit V10 | n/a |
| ||||||
| Siemens | Simit V11 | n/a |
|
No data.
-
- Version 0StatusaffectedConstraints<V7.5
- Version
-
- Version 0StatusaffectedConstraints<V7.5
- Version
-
- Version 0StatusaffectedConstraints<=*
- Version
-
- Version 0StatusaffectedConstraints<=*
- Version
-
- Version 0StatusaffectedConstraints<=*
- Version
-
- Version 0StatusaffectedConstraints<V11.1
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Siemens | Simatic Energy Manager Basic | n/a |
| ||||||
| Siemens | Simatic Energy Manager Pro | n/a |
| ||||||
| Siemens | Simatic Ipc Diagbase | n/a |
| ||||||
| Siemens | Simatic Ipc Diagmonitor | n/a |
| ||||||
| Siemens | Simit V10 | n/a |
| ||||||
| Siemens | Simit V11 | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (1)
Change history (0)
No recorded changes yet.