PT-2024-9692 · Siemens · Sinec Nms+6

Published 2024-12-16 · Updated 2025-02-04 · CVE-2024-49775

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Opcenter Execution Foundation versions prior to V5.0 Update 1 Opcenter Intelligence versions prior to V5.0 Update 1 Opcenter Quality versions prior to V5.0 Update 1 Opcenter RDL versions prior to V5.0 Update 1 SIMATIC PCS neo V4.0 versions prior to V5.0 Update 1 SIMATIC PCS neo V4.1 versions prior to V5.0 Update 1 SIMATIC PCS neo V5.0 versions prior to V5.0 Update 1 SINEC NMS versions prior to V2.15 Totally Integrated Automation Portal (TIA Portal) V16 versions prior to V5.0 Update 1 Totally Integrated Automation Portal (TIA Portal) V17 versions prior to V5.0 Update 1 Totally Integrated Automation Portal (TIA Portal) V18 versions prior to V5.0 Update 1 Totally Integrated Automation Portal (TIA Portal) V19 versions prior to V5.0 Update 1

Description The issue is related to a heap-based buffer overflow vulnerability in the integrated UMC component of the affected products. This could allow an unauthenticated remote attacker to execute arbitrary code. The vulnerability may expose systems to remote exploitation, potentially impacting industrial and enterprise environments.

Recommendations For Opcenter Execution Foundation, update to a version that includes the fix for this issue. For Opcenter Intelligence, update to a version that includes the fix for this issue. For Opcenter Quality, update to a version that includes the fix for this issue. For Opcenter RDL, update to a version that includes the fix for this issue. For SIMATIC PCS neo V4.0, update to a version that includes the fix for this issue. For SIMATIC PCS neo V4.1, update to a version that includes the fix for this issue. For SIMATIC PCS neo V5.0, update to V5.0 Update 1 or later. For SINEC NMS, update to V2.15 or later. For Totally Integrated Automation Portal (TIA Portal) V16, update to a version that includes the fix for this issue. For Totally Integrated Automation Portal (TIA Portal) V17, update to a version that includes the fix for this issue. For Totally Integrated Automation Portal (TIA Portal) V18, update to a version that includes the fix for this issue. For Totally Integrated Automation Portal (TIA Portal) V19, update to a version that includes the fix for this issue. As a temporary workaround, consider filtering ports 4002/4004 and blocking port 4004 if RT servers are unused.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2024-11404

CVE-2024-49775

Affected Products

Opcenter Execution Foundation

Opcenter Intelligence

Opcenter Quality

Opcenter Rd&L

Simatic Pcs Neo

Sinec Nms

Totally Integrated Automation Portal

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2024-49775 · Security Note
• https://bdu.fstec.ru/vul/2024-11404 · Security Note
• https://twitter.com/the_yellow_fall/status/1869922012816388454 · Twitter Post
• https://twitter.com/Komodosec/status/1871027835751801201 · Twitter Post
• https://twitter.com/3cSoc/status/1870043048635445273 · Twitter Post
• https://twitter.com/cracbot/status/1870348545251049674 · Twitter Post
• https://twitter.com/fridaysecurity/status/1869923645927088262 · Twitter Post
• https://twitter.com/CCBalert/status/1869313046058824048 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-928984.html · Note
• https://twitter.com/vuldb/status/1868689678616154200 · Twitter Post
• https://twitter.com/windowsforum/status/1869783850626199739 · Twitter Post
• https://twitter.com/Dinosn/status/1870016628127048144 · Twitter Post
• https://twitter.com/CVEnew/status/1868681158730383803 · Twitter Post
• https://twitter.com/RunSafeSecurity/status/1886799989155741886 · Twitter Post
• https://t.me/pentestingnews/54486 · Telegram Post