Skip to content
fr Sign in
9.8 Critical

CVE-2024-33698 A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),…

Description

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
Opcenter Quality 2406 earliest → < 2406 2406
Opcenter RDnL 2410 earliest → < 2410 2410
SIMATIC PCS neo V4.0 Versions not published
SIMATIC PCS neo V4.1 Versions not published
SIMATIC PCS neo V5.0 Versions not published
SINEC NMS Versions not published
SINEMA Remote Connect Client Versions not published
Totally Integrated Automation Portal (TIA Portal) V16 Versions not published
Totally Integrated Automation Portal (TIA Portal) V17 Versions not published
Show the 5 other branches
Product Affected versions Fixed in
Totally Integrated Automation Portal (TIA Portal) V18 Versions not published
Totally Integrated Automation Portal (TIA Portal) V19 Versions not published
simatic_pcs_neo 4.0 4.0 → latest No fix stated
simatic_information_server Versions not published
totally_integrated_automation_portal 17 17 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Opcenter Quality

The 13 CVEs of Opcenter Quality →
CVE-2026-109619 RCE via stale global state 9.2 Critical CVE-2026-109618 RCE via OOM corruption 9.2 Critical CVE-2024-49775 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter… 9.8 Critical CVE-2023-46285 A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All… 7.5 High
Track this CVE