PT-2023-7778 · Siemens · Opcenter Quality+4

Published 2023-12-12 · Updated 2024-10-08 · CVE-2023-46285

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Opcenter Execution Foundation versions prior to V2407 Opcenter Quality versions prior to V2312 SIMATIC PCS neo versions prior to V4.1 SINEC NMS versions prior to V2.0 SP1 Totally Integrated Automation Portal (TIA Portal) V14 Totally Integrated Automation Portal (TIA Portal) V15.1 Totally Integrated Automation Portal (TIA Portal) V16 Totally Integrated Automation Portal (TIA Portal) V17 versions prior to V17 Update 8 Totally Integrated Automation Portal (TIA Portal) V18 versions prior to V18 Update 3

Description The affected applications contain an improper input validation issue that could allow an attacker to bring the service into a Denial-of-Service state by sending a specifically crafted message to the 4004/tcp endpoint. The corresponding service is auto-restarted after the crash is detected by a watchdog. This issue may be exploited by a remote attacker to cause a denial of service.

Recommendations For Opcenter Execution Foundation versions prior to V2407, update to version V2407 or later. For Opcenter Quality versions prior to V2312, update to version V2312 or later. For SIMATIC PCS neo versions prior to V4.1, update to version V4.1 or later. For SINEC NMS versions prior to V2.0 SP1, update to version V2.0 SP1 or later. For Totally Integrated Automation Portal (TIA Portal) V14, consider upgrading to a later version with the necessary security fixes. For Totally Integrated Automation Portal (TIA Portal) V15.1, consider upgrading to a later version with the necessary security fixes. For Totally Integrated Automation Portal (TIA Portal) V16, consider upgrading to a later version with the necessary security fixes. For Totally Integrated Automation Portal (TIA Portal) V17 versions prior to V17 Update 8, update to V17 Update 8 or later. For Totally Integrated Automation Portal (TIA Portal) V18 versions prior to V18 Update 3, update to V18 Update 3 or later. As a temporary workaround, consider restricting access to the 4004/tcp endpoint to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2023-08845

CVE-2023-46285

Affected Products

Opcenter Execution Foundation

Opcenter Quality

Simatic Pcs Neo

Sinec Nms

Totally Integrated Automation Portal

References · 8

• https://cert-portal.siemens.com/productcert/pdf/ssa-999588.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46285 · Security Note
• https://safe-surf.ru/upload/VULN-new/VULN.2023-12-15.1.pdf · Security Note
• https://bdu.fstec.ru/vul/2023-08845 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46285 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-999588.html · Note
• https://twitter.com/CVEnew/status/1734537929102442760 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1734568099997716715 · Twitter Post