PT-2022-3583 · Microsoft+1 · Binaryformatter+2

Published

2022-04-12

·

Updated

2024-05-02

·

CVE-2022-23450

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SIMATIC Energy Manager Basic versions prior to V7.3 Update 1 SIMATIC Energy Manager PRO versions prior to V7.3 Update 1
Description The issue is related to insecure deserialization of user-supplied content, allowing an unauthenticated attacker to execute arbitrary code on the device with SYSTEM privileges. This can be achieved by sending a maliciously crafted serialized object to the affected system. The vulnerability is linked to the use of an insecure class, BinaryFormatter, which does not clear the types of deserialized classes and can create arbitrary classes, leading to the execution of arbitrary code when deserialized.
Recommendations For SIMATIC Energy Manager Basic versions prior to V7.3 Update 1, update to V7.3 Update 1 to resolve the issue. For SIMATIC Energy Manager PRO versions prior to V7.3 Update 1, update to V7.3 Update 1 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable service, BDataWIndowsService, to minimize the risk of exploitation. Avoid using the vulnerable BinaryFormatter class until the issue is resolved.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2022-04367
CVE-2022-23450

Affected Products

Binaryformatter
Simatic Energy Manager Basic
Simatic Energy Manager Pro