Skip to content
fr Sign in
9.8 Critical

CVE-2024-49775 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter…

Description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
Opcenter Execution Foundation 2501.0001 earliest → < 2501.0001 2501.0001
Opcenter Intelligence 2501.0001 earliest → < 2501.0001 2501.0001
Opcenter Quality 2512 earliest → < 2512 2512
Opcenter RDL Versions not published
SIMATIC PCS neo V4.0 Versions not published
SIMATIC PCS neo V4.1 Versions not published
SIMATIC PCS neo V5.0 Versions not published
SINEC NMS Versions not published
Totally Integrated Automation Portal (TIA Portal) V16 Versions not published
Show the 4 other branches
Product Affected versions Fixed in
Totally Integrated Automation Portal (TIA Portal) V17 Versions not published
Totally Integrated Automation Portal (TIA Portal) V18 Versions not published
Totally Integrated Automation Portal (TIA Portal) V19 Versions not published
Opcenter RDnL 2410 earliest → < 2410 2410

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Opcenter Execution Foundation

The 11 CVEs of Opcenter Execution Foundation →
CVE-2026-109619 RCE via stale global state 9.2 Critical CVE-2026-109618 RCE via OOM corruption 9.2 Critical CVE-2023-46285 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 High CVE-2023-46284 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 High
Track this CVE