Aller au contenu
en Se connecter
9.1 Critique

CVE-2024-35783 A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All…

Description

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

Produits et versions touchés

Produit Versions touchées Corrigé en
SIMATIC BATCH V9.1 Versions non publiées
SIMATIC Information Server 2020 Versions non publiées
SIMATIC Information Server 2022 Versions non publiées
SIMATIC PCS 7 V9.1 Versions non publiées
SIMATIC Process Historian 2020 Versions non publiées
SIMATIC Process Historian 2022 Versions non publiées
SIMATIC WinCC Runtime Professional V18 Versions non publiées
SIMATIC WinCC Runtime Professional V19 Versions non publiées
SIMATIC WinCC V7.4 Versions non publiées
Afficher les 5 autres branches
Produit Versions touchées Corrigé en
SIMATIC WinCC V7.5 Versions non publiées
SIMATIC WinCC V8.0 Versions non publiées
simatic_batch Versions non publiées
simatic_wincc 8.0 8.0 → dernières Pas de correctif indiqué
simatic_wincc 7.4 7.4 → dernières Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SIMATIC BATCH V9.1

Les 6 CVE de SIMATIC BATCH V9.1 →
CVE-2025-30033 The affected setup component is vulnerable to DLL hijacking 7.8 Élevée CVE-2023-46280 A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All… 6.5 Moyenne CVE-2023-48364 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <… 6.5 Moyenne CVE-2023-48363 A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <… 6.5 Moyenne
Suivre cette CVE