PT-2024-2743 · Siemens · Simatic Pcs 7+5

Yu Cong · Published 2024-02-13 · Updated 2024-10-18 · CVE-2023-48364

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenPCS 7 versions prior to V9.1 SP2 UC05 SIMATIC BATCH versions prior to V9.1 SP2 UC05 SIMATIC PCS 7 versions prior to V9.1 SP2 UC05 SIMATIC Route Control versions prior to V9.1 SP2 UC05 SIMATIC WinCC Runtime Professional V18 versions prior to V18 Update 4 SIMATIC WinCC Runtime Professional V19 versions prior to V19 Update 2 SIMATIC WinCC V7.4 (all versions) SIMATIC WinCC V7.5 versions prior to V7.5 SP2 Update 15 SIMATIC WinCC V8.0 versions prior to V8.0 Update 4

Description A vulnerability has been identified in the implementation of the RPC (Remote Procedure call) communication protocol in the affected products. The issue is related to errors in handling certain malformed RPC messages and pointer dereferencing errors. This could allow an attacker to cause a denial of service condition in the RPC server.

Recommendations For OpenPCS 7 versions prior to V9.1 SP2 UC05, update to V9.1 SP2 UC05 or later. For SIMATIC BATCH versions prior to V9.1 SP2 UC05, update to V9.1 SP2 UC05 or later. For SIMATIC PCS 7 versions prior to V9.1 SP2 UC05, update to V9.1 SP2 UC05 or later. For SIMATIC Route Control versions prior to V9.1 SP2 UC05, update to V9.1 SP2 UC05 or later. For SIMATIC WinCC Runtime Professional V18 versions prior to V18 Update 4, update to V18 Update 4 or later. For SIMATIC WinCC Runtime Professional V19 versions prior to V19 Update 2, update to V19 Update 2 or later. For SIMATIC WinCC V7.4, consider disabling the RPC communication protocol until a patch is available. For SIMATIC WinCC V7.5 versions prior to V7.5 SP2 Update 15, update to V7.5 SP2 Update 15 or later. For SIMATIC WinCC V8.0 versions prior to V8.0 Update 4, update to V8.0 Update 4 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-02868

CVE-2023-48364

Affected Products

Openpcs 7

Simatic Batch

Simatic Pcs 7

Simatic Route Control

Simatic Wincc

Simatic Wincc Runtime Professional

References · 7

• https://osv.dev/vulnerability/CVE-2023-48364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-48364 · Security Note
• https://cert-portal.siemens.com/productcert/html/ssa-753746.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02868 · Security Note
• https://twitter.com/VulmonFeeds/status/1757376422744563747 · Twitter Post
• https://twitter.com/CVEnew/status/1757332563402649895 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2024022016 · Note