Skip to content
OpenAdvisories
Medium SSA-779936 1 CVE

SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19

Published Jul 9, 2024 · Updated Jul 9, 2024

Vendor: Siemens Product: SIMATIC STEP 7 Safety V16 Product: SIMATIC STEP 7 Safety V17 Product: SIMATIC STEP 7 Safety V18 Product: SIMATIC STEP 7 V16 Product: SIMATIC STEP 7 V17 Product: SIMATIC STEP 7 V18 Product: SIMATIC WinCC Unified V16 Product: SIMATIC WinCC Unified V17 Product: SIMATIC WinCC Unified V18 Product: SIMATIC WinCC V16 Product: SIMATIC WinCC V17 Product: SIMATIC WinCC V18 Product: SIMOCODE ES V16 Product: SIMOCODE ES V17 Product: SIMOCODE ES V18 Product: SIMOTION SCOUT TIA V5.4 SP1 Product: SIMOTION SCOUT TIA V5.4 SP3 Product: SIMOTION SCOUT TIA V5.5 SP1 Product: SINAMICS Startdrive V16 Product: SINAMICS Startdrive V17 Product: SINAMICS Startdrive V18 Product: SIRIUS Safety ES V17 Product: SIRIUS Safety ES V18 Product: SIRIUS Soft Starter ES V17 Product: SIRIUS Soft Starter ES V18 Product: Soft Starter ES V16 Product: TIA Portal Cloud V3.0

Summary

Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References