- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SIMATIC BATCH V9.1
- Vendor
- Siemens
- Product
- SIMATIC BATCH V9.1
- Platforms
- Unknown
- Default status
unknown
SIMATIC BATCH V9.1 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | * | Unavailable | None listed |
|---|
SIMATIC Information Server 2020
- Vendor
- Siemens
- Product
- SIMATIC Information Server 2020
- Platforms
- Unknown
- Default status
unknown
SIMATIC Information Server 2020 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2020 SP2 Update 5 | Unavailable | None listed |
|---|
SIMATIC Information Server 2022
- Vendor
- Siemens
- Product
- SIMATIC Information Server 2022
- Platforms
- Unknown
- Default status
unknown
SIMATIC Information Server 2022 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2022 SP1 Update 2 | Unavailable | None listed |
|---|
SIMATIC PCS 7 V9.1
- Vendor
- Siemens
- Product
- SIMATIC PCS 7 V9.1
- Platforms
- Unknown
- Default status
unknown
SIMATIC PCS 7 V9.1 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V9.1 SP2 UC06 | Unavailable | None listed |
|---|
SIMATIC Process Historian 2020
- Vendor
- Siemens
- Product
- SIMATIC Process Historian 2020
- Platforms
- Unknown
- Default status
unknown
SIMATIC Process Historian 2020 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2020 SP2 Update 5 | Unavailable | None listed |
|---|
SIMATIC Process Historian 2022
- Vendor
- Siemens
- Product
- SIMATIC Process Historian 2022
- Platforms
- Unknown
- Default status
unknown
SIMATIC Process Historian 2022 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V2022 SP1 Update 2 | Unavailable | None listed |
|---|
SIMATIC WinCC Runtime Professional V18
- Vendor
- Siemens
- Product
- SIMATIC WinCC Runtime Professional V18
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC Runtime Professional V18 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V18 Update 5 | Unavailable | None listed |
|---|
SIMATIC WinCC Runtime Professional V19
- Vendor
- Siemens
- Product
- SIMATIC WinCC Runtime Professional V19
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC Runtime Professional V19 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V19 Update 3 | Unavailable | None listed |
|---|
SIMATIC WinCC V7.4
- Vendor
- Siemens
- Product
- SIMATIC WinCC V7.4
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC V7.4 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | * | Unavailable | None listed |
|---|
SIMATIC WinCC V7.5
- Vendor
- Siemens
- Product
- SIMATIC WinCC V7.5
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC V7.5 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V7.5 SP2 Update 18 | Unavailable | None listed |
|---|
SIMATIC WinCC V8.0
- Vendor
- Siemens
- Product
- SIMATIC WinCC V8.0
- Platforms
- Unknown
- Default status
unknown
SIMATIC WinCC V8.0 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 0 | affected | custom | V8.0 Update 5 | Unavailable | None listed |
|---|