{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2023-46280", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-46280", "idYear": 2023, "status": "PUBLISHED", "publishedAt": "2024-05-14T10:01:52.069Z", "updatedAt": "2026-06-09T08:46:42.279Z", "importedAt": "2026-10-24T01:56:58.683Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": null, "summary": "A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All versions < V5.0 SP2), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 Upd5), SIMATIC NET PC Software V16 (All versions < V16 Update 8), SIMATIC NET PC Software V17 (All versions), SIMATIC NET PC Software V18 (All versions < V18 SP1), SIMATIC NET PC Software V19 (All versions < V19 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PDM V9.2 (All versions < V9.2 SP2 Upd3), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 Upd3), SIMATIC S7-PCT (All versions < V3.5 SP3 Update 6), SIMATIC STEP 7 V5 (All versions < V5.7 SP3), SIMATIC WinCC OA V3.17 (All versions), SIMATIC WinCC OA V3.18 (All versions < V3.18 P025), SIMATIC WinCC OA V3.19 (All versions < V3.19 P010), SIMATIC WinCC Runtime Advanced (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V16 (All versions < V16 Update 6), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Update 8), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5), SINAMICS Startdrive (All versions < V19 SP1), SINEC NMS (All versions < V3.0), SINUMERIK ONE virtual (All versions < V6.23), SINUMERIK PLC Programming Tool (All versions < V3.3.12), TIA Portal Cloud Connector (All versions < V2.0), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 4), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 2), SINEC NMS (All versions < V3.0 SP1). The affected applications contain an out of bounds read vulnerability. This could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel.", "affected": [ { "vendor": "Siemens", "product": "Security Configuration Tool (SCT)", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "SIMATIC Automation Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V5.0 SP2" } ] }, { "vendor": "Siemens", "product": "SIMATIC BATCH V9.1", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V9.1 SP2 Upd5" } ] }, { "vendor": "Siemens", "product": "SIMATIC NET PC Software V16", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V16 Update 8" } ] }, { "vendor": "Siemens", "product": "SIMATIC NET PC Software V17", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "SIMATIC NET PC Software V18", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V18 SP1" } ] }, { "vendor": "Siemens", "product": "SIMATIC NET PC Software V19", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V19 Update 2" } ] }, { "vendor": "Siemens", "product": "SIMATIC PCS 7 V9.1", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V9.1 SP2 UC05" } ] }, { "vendor": "Siemens", "product": "SIMATIC PDM V9.2", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V9.2 SP2 Upd3" } ] }, { "vendor": "Siemens", "product": "SIMATIC Route Control V9.1", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V9.1 SP2 Upd3" } ] }, { "vendor": "Siemens", "product": "SIMATIC S7-PCT", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.5 SP3 Update 6" } ] }, { "vendor": "Siemens", "product": "SIMATIC STEP 7 V5", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V5.7 SP3" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC OA V3.17", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC OA V3.18", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.18 P025" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC OA V3.19", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.19 P010" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC Runtime Advanced", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V17 Update 8" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC Runtime Professional V16", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V16 Update 6" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC Runtime Professional V17", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V17 Update 8" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC Runtime Professional V18", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V18 Update 4" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC Runtime Professional V19", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V19 Update 2" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC V7.4", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC V7.5", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V7.5 SP2 Update 17" } ] }, { "vendor": "Siemens", "product": "SIMATIC WinCC V8.0", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V8.0 Update 5" } ] }, { "vendor": "Siemens", "product": "SINAMICS Startdrive", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V19 SP1" } ] }, { "vendor": "Siemens", "product": "SINEC NMS", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.0" } ] }, { "vendor": "Siemens", "product": "SINUMERIK ONE virtual", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V6.23" } ] }, { "vendor": "Siemens", "product": "SINUMERIK PLC Programming Tool", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.3.12" } ] }, { "vendor": "Siemens", "product": "TIA Portal Cloud Connector", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V2.0" } ] }, { "vendor": "Siemens", "product": "Totally Integrated Automation Portal (TIA Portal) V15.1", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "Totally Integrated Automation Portal (TIA Portal) V16", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "*" } ] }, { "vendor": "Siemens", "product": "Totally Integrated Automation Portal (TIA Portal) V17", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V17 Update 8" } ] }, { "vendor": "Siemens", "product": "Totally Integrated Automation Portal (TIA Portal) V18", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V18 Update 4" } ] }, { "vendor": "Siemens", "product": "Totally Integrated Automation Portal (TIA Portal) V19", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V19 Update 2" } ] }, { "vendor": "Siemens", "product": "SINEC NMS", "defaultStatus": "unknown", "versions": [ { "version": "0", "status": "affected", "versionType": "custom", "lessThan": "V3.0 SP1" } ] } ] } } }