Summary
The products listed below contain a remote code execution vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Critical 9.1
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions…
Revision history
-
#4
Added fix information for SIMATIC Information Server 2022 and SIMATIC Process Historian 2022
-
#3
Added fix information for SIMATIC WinCC Runtime Professional V18
-
#2
Added fix information for SIMATIC WinCC Runtime Professional V19 and updated fix information for SIMATIC PCS 7 V9.1
-
#1
Publication Date
References
-
SSA-629254: Remote Code Execution Vulnerability in SIMATIC SCADA and PCS 7 systems - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-629254.html