Skip to content
OpenAdvisories
High SSA-999588 5 CVEs

SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2

Published Dec 12, 2023 · Updated Jan 14, 2025 · Revision 8

Vendor: Siemens Product: Opcenter Execution Foundation Product: Opcenter Quality Product: SIMATIC PCS neo Product: SINEC NMS Product: Totally Integrated Automation Portal (TIA Portal) V14 Product: Totally Integrated Automation Portal (TIA Portal) V15.1 Product: Totally Integrated Automation Portal (TIA Portal) V16 Product: Totally Integrated Automation Portal (TIA Portal) V17 Product: Totally Integrated Automation Portal (TIA Portal) V18

Summary

Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 5

Revision history

  1. #8

    Clarified no more fixes planned for Totally Integrated Automation Portal (TIA Portal) V16

  2. #7

    Added affected product and fix for Opcenter Execution Foundation

  3. #6

    Added fix for Totally Integrated Automation Portal (TIA Portal) V17

  4. #5

    Errata: Removed fix for Totally Integrated Automation Portal (TIA Portal) V17

  5. #4

    Removed unaffected product SINUMERIK Integrate RunMyHMI /Automotive

  6. #3

    Added fix for Opcenter Quality as well as product and fix for SINEC NMS

  7. #2

    Added fix for Totally Integrated Automation Portal (TIA Portal) V17

  8. #1

    Publication Date

References