CVE-2024-33698
No fix known EPSS 1%CVSS 9.8
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.
Products: Siemens Opcenter Quality, Siemens Opcenter RDnL, Siemens SIMATIC PCS neo V4.0, Siemens SIMATIC PCS neo V4.1, Siemens SIMATIC PCS neo V5.0, Siemens SINEC NMS, Siemens SINEMA Remote Connect Client, Siemens Totally Integrated Automation Portal (TIA Portal) V16, Siemens Totally Integrated Automation Portal (TIA Portal) V17, Siemens Totally Integrated Automation Portal (TIA Portal) V18, Siemens Totally Integrated Automation Portal (TIA Portal) V19, Siemens SIMATIC PCS neo, siemens simatic_information_server, siemens totally_integrated_automation_portal