Publication Date:
Last Update:
Current Version: V1.0
CVSS v3.1 Base Score: 6.5
CVSS v4.0 Base Score: 8.2
Affected Product and Versions Remediation

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is planned

All versions < V3.18 P025
affected by all CVEs

All versions < V3.19 P010
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions < V19 SP1
affected by all CVEs

All versions < V6.23
affected by all CVEs
Update to V6.23 or later version

All versions
affected by all CVEs
Currently no fix is available

All versions < V2.0
affected by all CVEs

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is planned

All versions
affected by all CVEs
Currently no fix is available

All versions
affected by all CVEs
Currently no fix is available

All versions < V19 Update 2
affected by all CVEs
Update to V19 Update 2 or later version

Product-specific remediations or mitigations can be found in the section Affected Products and Solution.
Please follow the General Security Recommendations.

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

CVSS v3.1 Base Score 6.5
CVSS v3.1 Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
CVSS v4.0 Base Score 8.2
CVSS v4.0 Vector CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
CWE CWE-125: Out-of-bounds Read

  • Jongseong Kim, Byunghyun Kang, Sangjun Park, Yunjin Park, Kwon Yul, and Seungchan Kim from Team today-0day (bob 12th) for reporting the vulnerability

https://www.siemens.com/cert/advisories
V1.0 (2024-05-14): Publication Date