PT-2023-3622 · Siemens+1 · Simatic Wincc+6

Published 2023-06-13 · Updated 2023-07-05 · CVE-2023-28829

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SIMATIC NET PC Software versions V14 through V15 SIMATIC PCS 7 versions V8.2 through V9.1 SIMATIC WinCC versions prior to V8.0 SINAUT Software ST7sc (affected versions not specified)

Description The issue is related to the use of outdated functions in the software. It may allow a remote attacker to gain unauthorized access to encrypted data. The affected software used legacy OPC services by default, which were designed using Windows ActiveX and DCOM mechanisms and lack modern security mechanisms for authentication and encryption.

Recommendations For SIMATIC NET PC Software versions V14 and V15, update the software to a version that implements state-of-the-art security mechanisms. For SIMATIC PCS 7 versions V8.2 through V9.1, consider disabling the legacy OPC services until a patch is available. For SIMATIC WinCC versions prior to V8.0, restrict access to the legacy OPC services to minimize the risk of exploitation. For SINAUT Software ST7sc, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-477

Related Identifiers

BDU:2023-03906

CVE-2023-28829

Affected Products

Activex

Dcom

Simatic Net Pc

Simatic Pcs 7

Simatic Wincc

Sinaut Software St7Sc

Windows

References · 6

• https://osv.dev/vulnerability/CVE-2023-28829 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-508677.pdf · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03906 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28829 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-166-05 · Note
• https://vuldb.com/ru/?id.231334 · Note