7.8
Élevée
CVE-2022-45147 A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC…
Description
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC PCS neo V4.0 | Versions non publiées | |
| SIMATIC STEP 7 V16 | Versions non publiées | |
| SIMATIC STEP 7 V17 | Versions non publiées | |
| SIMATIC STEP 7 V18 | Versions non publiées | |
| simatic_pcs_neo 4.0 | 4.0 → < 5.0 | 5.0 |
| simatic_step_7 18 | 18 → dernières | Pas de correctif indiqué |
| simatic_step_7 17 | 17 → < 18 | 18 |
| simatic_step_7 16 | 16 → < 17 | 17 |
Références
- cert-portal.siemens.com cert-portal.siemens.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SIMATIC PCS neo V4.0
Les 5 CVE de SIMATIC PCS neo V4.0 →
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1…
8.8
Élevée
CVE-2024-49775
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter…
9.8
Critique
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410),…
9.8
Critique
CVE-2023-28831
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could…
7.5
Élevée