Skip to content
OpenAdvisories
Medium SSA-753746 2 CVEs

SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Published Feb 13, 2024 · Updated Sep 10, 2024 · Revision 5

Vendor: Siemens Product: OpenPCS 7 V9.1 Product: SIMATIC BATCH V9.1 Product: SIMATIC PCS 7 V9.1 Product: SIMATIC Route Control V9.1 Product: SIMATIC WinCC Runtime Professional V18 Product: SIMATIC WinCC Runtime Professional V19 Product: SIMATIC WinCC V7.4 Product: SIMATIC WinCC V7.5 Product: SIMATIC WinCC V8.0

Summary

Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #5

    Added fix for SIMATIC PCS 7 V9.1, SIMATIC BATCH V9.1, OpenPCS 7 and SIMATIC Route Control V9.1

  2. #4

    Added fix for SIMATIC WinCC Runtime Professional V18

  3. #3

    Added fix for SIMATIC WinCC Runtime Professional V19 and corrected fix version of WinCC V8.0 from SP4 to Update4

  4. #2

    Added a mitigation

  5. #1

    Publication Date

References