CVE-2023-46280

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: May 14, 2024
Source updated: Jun 9, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 Upd5), SIMATIC NET PC Software V16 (All versions < V16 Update 8), SIMATIC NET PC Software V17 (All versions), SIMATIC NET PC Software V18 (All versions < V18 SP1), SIMATIC NET PC Software V19 (All versions < V19 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PDM V9.2 (All versions < V9.2 SP2 Upd3), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 Upd3), SIMATIC S7-PCT (All versions < V3.5 SP3 Update 6), SIMATIC STEP 7 V5 (All versions < V5.7 SP3), SIMATIC WinCC OA V3.17 (All versions), SIMATIC WinCC OA V3.18 (All versions < V3.18 P025), SIMATIC WinCC OA V3.19 (All versions < V3.19 P010), SIMATIC WinCC Runtime Advanced (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 6), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5), SINAMICS Startdrive (All versions < V19 SP1), SINEC NMS (All versions < V3.0), SINUMERIK ONE virtual (All versions < V6.23), SINUMERIK PLC Programming Tool (All versions < V3.3.12), TIA Portal Cloud Connector (All versions < V2.0), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 4), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 2), SINEC NMS (All versions < V3.0 SP1). The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Security Configuration Tool (SCT)

Vendor: Siemens
Product: Security Configuration Tool (SCT)
Platforms: Unknown
Default status: unknown

Security Configuration Tool (SCT) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

SIMATIC Automation Tool

Vendor: Siemens
Product: SIMATIC Automation Tool
Platforms: Unknown
Default status: unknown

SIMATIC Automation Tool · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V5.0 SP2	Unavailable	None listed

SIMATIC BATCH V9.1

Vendor: Siemens
Product: SIMATIC BATCH V9.1
Platforms: Unknown
Default status: unknown

SIMATIC BATCH V9.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V9.1 SP2 Upd5	Unavailable	None listed

SIMATIC NET PC Software V16

Vendor: Siemens
Product: SIMATIC NET PC Software V16
Platforms: Unknown
Default status: unknown

SIMATIC NET PC Software V16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V16 Update 8	Unavailable	None listed

SIMATIC NET PC Software V17

Vendor: Siemens
Product: SIMATIC NET PC Software V17
Platforms: Unknown
Default status: unknown

SIMATIC NET PC Software V17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

SIMATIC NET PC Software V18

Vendor: Siemens
Product: SIMATIC NET PC Software V18
Platforms: Unknown
Default status: unknown

SIMATIC NET PC Software V18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V18 SP1	Unavailable	None listed

SIMATIC NET PC Software V19

Vendor: Siemens
Product: SIMATIC NET PC Software V19
Platforms: Unknown
Default status: unknown

SIMATIC NET PC Software V19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V19 Update 2	Unavailable	None listed

SIMATIC PCS 7 V9.1

Vendor: Siemens
Product: SIMATIC PCS 7 V9.1
Platforms: Unknown
Default status: unknown

SIMATIC PCS 7 V9.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V9.1 SP2 UC05	Unavailable	None listed

SIMATIC PDM V9.2

Vendor: Siemens
Product: SIMATIC PDM V9.2
Platforms: Unknown
Default status: unknown

SIMATIC PDM V9.2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V9.2 SP2 Upd3	Unavailable	None listed

SIMATIC Route Control V9.1

Vendor: Siemens
Product: SIMATIC Route Control V9.1
Platforms: Unknown
Default status: unknown

SIMATIC Route Control V9.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V9.1 SP2 Upd3	Unavailable	None listed

SIMATIC S7-PCT

Vendor: Siemens
Product: SIMATIC S7-PCT
Platforms: Unknown
Default status: unknown

SIMATIC S7-PCT · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.5 SP3 Update 6	Unavailable	None listed

SIMATIC STEP 7 V5

Vendor: Siemens
Product: SIMATIC STEP 7 V5
Platforms: Unknown
Default status: unknown

SIMATIC STEP 7 V5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V5.7 SP3	Unavailable	None listed

SIMATIC WinCC OA V3.17

Vendor: Siemens
Product: SIMATIC WinCC OA V3.17
Platforms: Unknown
Default status: unknown

SIMATIC WinCC OA V3.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

SIMATIC WinCC OA V3.18

Vendor: Siemens
Product: SIMATIC WinCC OA V3.18
Platforms: Unknown
Default status: unknown

SIMATIC WinCC OA V3.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.18 P025	Unavailable	None listed

SIMATIC WinCC OA V3.19

Vendor: Siemens
Product: SIMATIC WinCC OA V3.19
Platforms: Unknown
Default status: unknown

SIMATIC WinCC OA V3.19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.19 P010	Unavailable	None listed

SIMATIC WinCC Runtime Advanced

Vendor: Siemens
Product: SIMATIC WinCC Runtime Advanced
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Advanced · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V17 Update 8	Unavailable	None listed

SIMATIC WinCC Runtime Professional V16

Vendor: Siemens
Product: SIMATIC WinCC Runtime Professional V16
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Professional V16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V16 Update 6	Unavailable	None listed

SIMATIC WinCC Runtime Professional V17

Vendor: Siemens
Product: SIMATIC WinCC Runtime Professional V17
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Professional V17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V17 Update 8	Unavailable	None listed

SIMATIC WinCC Runtime Professional V18

Vendor: Siemens
Product: SIMATIC WinCC Runtime Professional V18
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Professional V18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V18 Update 4	Unavailable	None listed

SIMATIC WinCC Runtime Professional V19

Vendor: Siemens
Product: SIMATIC WinCC Runtime Professional V19
Platforms: Unknown
Default status: unknown

SIMATIC WinCC Runtime Professional V19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V19 Update 2	Unavailable	None listed

SIMATIC WinCC V7.4

Vendor: Siemens
Product: SIMATIC WinCC V7.4
Platforms: Unknown
Default status: unknown

SIMATIC WinCC V7.4 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

SIMATIC WinCC V7.5

Vendor: Siemens
Product: SIMATIC WinCC V7.5
Platforms: Unknown
Default status: unknown

SIMATIC WinCC V7.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V7.5 SP2 Update 17	Unavailable	None listed

SIMATIC WinCC V8.0

Vendor: Siemens
Product: SIMATIC WinCC V8.0
Platforms: Unknown
Default status: unknown

SIMATIC WinCC V8.0 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V8.0 Update 5	Unavailable	None listed

SINAMICS Startdrive

Vendor: Siemens
Product: SINAMICS Startdrive
Platforms: Unknown
Default status: unknown

SINAMICS Startdrive · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V19 SP1	Unavailable	None listed

SINEC NMS

Vendor: Siemens
Product: SINEC NMS
Platforms: Unknown
Default status: unknown

SINEC NMS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.0	Unavailable	None listed

SINUMERIK ONE virtual

Vendor: Siemens
Product: SINUMERIK ONE virtual
Platforms: Unknown
Default status: unknown

SINUMERIK ONE virtual · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V6.23	Unavailable	None listed

SINUMERIK PLC Programming Tool

Vendor: Siemens
Product: SINUMERIK PLC Programming Tool
Platforms: Unknown
Default status: unknown

SINUMERIK PLC Programming Tool · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.3.12	Unavailable	None listed

TIA Portal Cloud Connector

Vendor: Siemens
Product: TIA Portal Cloud Connector
Platforms: Unknown
Default status: unknown

TIA Portal Cloud Connector · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V2.0	Unavailable	None listed

Totally Integrated Automation Portal (TIA Portal) V15.1

Vendor: Siemens
Product: Totally Integrated Automation Portal (TIA Portal) V15.1
Platforms: Unknown
Default status: unknown

Totally Integrated Automation Portal (TIA Portal) V15.1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

Totally Integrated Automation Portal (TIA Portal) V16

Vendor: Siemens
Product: Totally Integrated Automation Portal (TIA Portal) V16
Platforms: Unknown
Default status: unknown

Totally Integrated Automation Portal (TIA Portal) V16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	*	Unavailable	None listed

Totally Integrated Automation Portal (TIA Portal) V17

Vendor: Siemens
Product: Totally Integrated Automation Portal (TIA Portal) V17
Platforms: Unknown
Default status: unknown

Totally Integrated Automation Portal (TIA Portal) V17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V17 Update 8	Unavailable	None listed

Totally Integrated Automation Portal (TIA Portal) V18

Vendor: Siemens
Product: Totally Integrated Automation Portal (TIA Portal) V18
Platforms: Unknown
Default status: unknown

Totally Integrated Automation Portal (TIA Portal) V18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V18 Update 4	Unavailable	None listed

Totally Integrated Automation Portal (TIA Portal) V19

Vendor: Siemens
Product: Totally Integrated Automation Portal (TIA Portal) V19
Platforms: Unknown
Default status: unknown

Totally Integrated Automation Portal (TIA Portal) V19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V19 Update 2	Unavailable	None listed

SINEC NMS

Vendor: Siemens
Product: SINEC NMS
Platforms: Unknown
Default status: unknown

SINEC NMS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	V3.0 SP1	Unavailable	None listed