Skip to content
OpenAdvisories
Medium SSA-841348 3 CVEs

SSA-841348: Multiple Vulnerabilities in the UMC Component

Published Jul 14, 2020 · Updated Aug 9, 2022 · Revision 10

Vendor: Siemens Product: Opcenter Execution Discrete Product: Opcenter Execution Foundation Product: Opcenter Execution Process Product: Opcenter Intelligence Product: Opcenter Quality Product: Opcenter RD&L Product: SIMATIC IT LMS Product: SIMATIC IT Production Suite Product: SIMATIC Notifier Server for Windows Product: SIMATIC PCS neo Product: SIMATIC STEP 7 (TIA Portal) V15 Product: SIMATIC STEP 7 (TIA Portal) V16 Product: SIMOCODE ES V15.1 Product: SIMOCODE ES V16 Product: Soft Starter ES V15.1 Product: Soft Starter ES V16

Summary

The products listed below contain two security vulnerabilities in the
UMC component that could allow an attacker to cause a partial denial-
of-service of the UMC component, or to locally escalate privileges
from a user with administrative privileges to execute code with SYSTEM
level privileges. Siemens has released updates for several
affected products and recommends to update to the latest versions.
Siemens recommends specific countermeasures for products where updates
are not, or not yet available.

Vulnerabilities 3

Revision history

  1. #10

    No fix planned for SIMATIC Notifier Server for Windows; corrected fix version information for SIMOCODE ES and Soft Starter ES

  2. #9

    Added solution for SIMATIC IT LMS

  3. #8

    Added solution for Opcenter Intelligence

  4. #7

    Added solution for SIMATIC IT Production Suite

  5. #6

    Added solution for SIMOCODE ES V15 and Soft Starter ES V15

  6. #5

    Added solution for Soft Starter ES

  7. #4

    Added solution for SIMOCODE ES

  8. #3

    Added solution for SIMATIC STEP 7 (TIA Portal) V15

  9. #2

    Added solution for SIMATIC PCS neo

  10. #1

    Publication Date

References