Patch days / June 2024

Siemens ProductCERT Patch Day — June 2024

Tuesday, 11 June 2024

Vulnerabilities: 14
Critical: 1
High: 4
Zero-days: 0
Public exploit: 0

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

Critical 9.3
CVE-2024-36266 A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. …

All vulnerabilities 14

Critical1 Show

Critical 9.3
CVE-2024-36266 A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. …

High4 Show

Medium8 Show

Low1 Show

Low 3.3
CVE-2023-38533 A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with i…