Medium WID-SEC-2024-2091 4 CVEs

Siemens SIMATIC WinCC: Mehrere Schwachstellen ermöglichen Denial of Service

Published Sep 9, 2024 · Updated Feb 5, 2025 · Revision 2 · de-DE

Vendor: Siemens Product: SIMATIC WinCC Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens SIMATIC WinCC ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

WinCC (Windows Control Center) ist ein PC-basiertes Prozessvisualisierungssystem von Siemens.

Vulnerabilities 4

High 7.3

CVE-2024-38355 Public exploit

Unhandled 'error' event in socket.io

Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. This issue is fixed by commit `15af2…

socketio socket.io socket.io npm

Jun 19, 2024
Medium 5.9

CVE-2023-28827

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC C…

Siemens TIM 1531 IRC SIMATIC WinCC Runtime Advanced SIMATIC CP 1243-8 IRC ICS / OT

Sep 10, 2024
Medium 5.9

CVE-2023-30756

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC C…

Siemens TIM 1531 IRC SIMATIC WinCC Runtime Advanced SIMATIC CP 1243-8 IRC ICS / OT

Sep 10, 2024
Medium 4.4

CVE-2023-30755

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC C…

Siemens TIM 1531 IRC SIMATIC WinCC Runtime Advanced SIMATIC CP 1243-8 IRC ICS / OT

Sep 10, 2024

Revision history

2025-02-05 #2
Neue Updates von Siemens aufgenommen
2024-09-09 #1
Initiale Fassung

References

SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09
https://cert-portal.siemens.com/productcert/html/ssa-773256.html
SiemensSecurity Advisory by Siemens ProductCERT vom 2024-09-09
https://cert-portal.siemens.com/productcert/html/ssa-423808.html
SiemensSecurity Advisory SSA-773256 by Siemens ProductCERT abgerufen am 2025-02-06
https://cert-portal.siemens.com/productcert/html/ssa-773256.html