PT-2022-7391 · Siemens+1 · Simatic Step 7+2

Published 2022-11-11 · Updated 2024-07-09 · CVE-2022-45147

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC PCS neo version 4.0 SIMATIC STEP 7 versions 16 through 17 SIMATIC STEP 7 versions 18 through 18 Update 1

Description A vulnerability has been identified in the affected applications, which do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. The issue is related to the deserialization mechanism, which can be exploited by an attacker using specially crafted data.

Recommendations For SIMATIC PCS neo version 4.0, update the .NET BinaryFormatter to properly restrict deserialization of user-controllable input. For SIMATIC STEP 7 versions 16 through 17, update the .NET BinaryFormatter to properly restrict deserialization of user-controllable input. For SIMATIC STEP 7 versions 18 through 18 Update 1, update to version 18 Update 2 or later to fix the deserialization issue. As a temporary workaround, consider disabling the deserialization of user-controllable input until a patch is available.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2024-05703

CVE-2022-45147

Affected Products

.Net Binaryformatter

Simatic Pcs Neo

Simatic Step 7

References · 6

• https://bdu.fstec.ru/vul/2024-05703 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45147 · Security Note
• https://vuldb.com/ru/?id.270649 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-825651.html · Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-193-17 · Note
• https://twitter.com/CVEnew/status/1810652009110114693 · Twitter Post