Riskcovery

CVE-2024-35783

State
Published
Severity
9.4 Critical
Published
Sep 10, 2024
Updated
Jan 14, 2025
Reserved
May 17, 2024

Read the record on cve.org

Description

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

Scores

CVSSScoreVectorSource
4.09.4 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:Hsiemens
3.19.1 CriticalCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:Csiemens

Weaknesses

  • CWE-250 Execution with Unnecessary Privileges

Affected Products

ProductVersions
SIMATIC BATCH V9.1Siemens
  • all versionsAffected
SIMATIC Information Server 2020Siemens
  • before V2020 SP2 Update 5Affected
SIMATIC Information Server 2022Siemens
  • before V2022 SP1 Update 2Affected
SIMATIC PCS 7 V9.1Siemens
  • before V9.1 SP2 UC06Affected
SIMATIC Process Historian 2020Siemens
  • before V2020 SP2 Update 5Affected
SIMATIC Process Historian 2022Siemens
  • before V2022 SP1 Update 2Affected
SIMATIC WinCC Runtime Professional V18Siemens
  • before V18 Update 5Affected
SIMATIC WinCC Runtime Professional V19Siemens
  • before V19 Update 3Affected
SIMATIC WinCC V7.4Siemens
  • all versionsAffected
SIMATIC WinCC V7.5Siemens
  • before V7.5 SP2 Update 18Affected
SIMATIC WinCC V8.0Siemens
  • before V8.0 Update 5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.