Skip to content
fr Sign in
9.1 Critical

CVE-2024-35783 A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All…

Description

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

Affected products and versions

Product Affected versions Fixed in
SIMATIC BATCH V9.1 Versions not published
SIMATIC Information Server 2020 Versions not published
SIMATIC Information Server 2022 Versions not published
SIMATIC PCS 7 V9.1 Versions not published
SIMATIC Process Historian 2020 Versions not published
SIMATIC Process Historian 2022 Versions not published
SIMATIC WinCC Runtime Professional V18 Versions not published
SIMATIC WinCC Runtime Professional V19 Versions not published
SIMATIC WinCC V7.4 Versions not published
Show the 5 other branches
Product Affected versions Fixed in
SIMATIC WinCC V7.5 Versions not published
SIMATIC WinCC V8.0 Versions not published
simatic_batch Versions not published
simatic_wincc 8.0 8.0 → latest No fix stated
simatic_wincc 7.4 7.4 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SIMATIC BATCH V9.1

The 6 CVEs of SIMATIC BATCH V9.1 →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 High CVE-2023-46280 A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All… 6.5 Medium CVE-2023-48364 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <… 6.5 Medium CVE-2023-48363 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <… 6.5 Medium
Track this CVE