VDB

GCVE-110-NCSC-2024-433

GCVE-110-NCSC-2024-433
Advisory PublishedCVSS 7.8/10
Vulnetix · Advisory published November 12, 2024
Improper Authentication

Weaknesses (CWE)

CWE-125Out-of-bounds ReadCWE-287Improper AuthenticationCWE-20Improper Input ValidationCWE-404Improper Resource Shutdown or ReleaseCWE-617Reachable AssertionCWE-400Uncontrolled Resource ConsumptionCWE-325Missing Cryptographic StepCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-328Use of Weak HashCWE-770Allocation of Resources Without Limits or ThrottlingCWE-122Heap-based Buffer OverflowCWE-275-CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-502Deserialization of Untrusted DataCWE-354Improper Validation of Integrity Check ValueCWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')CWE-94Improper Control of Generation of Code ('Code Injection')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-201Insertion of Sensitive Information Into Sent DataCWE-311Missing Encryption of Sensitive DataCWE-208Observable Timing DiscrepancyCWE-222Truncation of Security-relevant InformationCWE-190Integer Overflow or WraparoundCWE-121Stack-based Buffer OverflowCWE-416Use After FreeCWE-476NULL Pointer DereferenceCWE-319Cleartext Transmission of Sensitive InformationCWE-295Improper Certificate ValidationCWE-772Missing Release of Resource after Effective LifetimeCWE-606Unchecked Input for Loop ConditionCWE-271Privilege Dropping / Lowering ErrorsCWE-942Permissive Cross-domain Policy with Untrusted DomainsCWE-918Server-Side Request Forgery (SSRF)CWE-310-CWE-284Improper Access ControlCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-266Incorrect Privilege AssignmentCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-321Use of Hard-coded Cryptographic KeyCWE-613Insufficient Session ExpirationCWE-732Incorrect Permission Assignment for Critical ResourceCWE-427Uncontrolled Search Path ElementCWE-863Incorrect AuthorizationCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Risk Scores

CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
siemenstia_portal_cloud_connector
siemenstelecontrol_server_basic_256_v3.1
siemenssimatic_net_pc_software_v18
siemenssimatic_wincc_runtime_professional_v17
siemensmendix_runtime_v8
siemenssiport
siemensscalance_m876-4__nam_
siemenss7-pct
siemenssimatic_net_pc_software
siemenssimatic_step_7_v16
siemensscalance_m876-4__eu_
siemensscalance_m816-1_adsl-router
siemenssimatic_wincc_unified_v16
siemensscalance_mum856-1__row_
siemensscalance_mum853-1__eu_
siemensscalance_xcm332__6gk5332-0ga01-2ac2_
siemenssirius_soft_starter_es_v17
siemenssimatic_rtls_locating_manager__6gt2780-0da30_
siemensscalance_mum856-1__b1_
siemensscalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_
siemenstotally_integrated_automation_portal
siemensruggedcom_ape1808
siemensscalance_mum856-1__cn_
siemenssecurity_configuration_tool__sct_
siemenssimatic_wincc_v7.4
siemenssimatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_
siemenssimatic_s7-plcsim_v17
siemenspp_telecontrol_server_basic_1000_to_5000_v3.1
siemensscalance_xch328__6gk5328-4ts01-2ec2_
siemensscalance_m812-1_adsl-router
siemensscalance_m874-2
siemenssinumerik_one_virtual
siemenssimatic_wincc_v17
siemenssimatic_step_7_safety_v18
siemensscalance_mum856-1__a1_
siemenssimatic_route_control_v9.1
siemensmendix_runtime_v10
siemenssimatic_wincc_runtime_professional_v18
siemenssimatic_wincc_unified_v18
siemensscalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_
siemensscalance_s615_lan-router
siemenspp_telecontrol_server_basic_32_to_64_v3.1
siemensspectrum_power_7
siemensscalance_mum853-1__b1_
siemenssimatic_wincc_unified_pc_runtime
siemenssimotion_scout_tia_v5.5_sp1
siemenssimatic_cp_1543-1_v4.0
siemenstotally_integrated_automation_portal__tia_portal__v18
siemenssimatic_batch_v9.1
siemenssimatic_wincc_v8.0
siemensscalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_
siemenssinema_remote_connect_client
siemensozw772
siemensscalance_mum856-1__eu_
siemenssimatic_step_7_safety_v16
siemensscalance_m874-3
siemenssimatic_step_7_v5
siemenssimatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_
siemenstia_portal_cloud_v16
siemensscalance_m876-4
siemenssimatic_rtls_locating_manager__6gt2780-1ea30_
siemenssimocode_es_v17
siemenstelecontrol_server_basic_5000_v3.1
siemenstelecontrol_server_basic_1000_v3.1
siemenstotally_integrated_automation_portal__tia_portal__v16
siemenssimatic_wincc_runtime_professional_v16
siemenssimatic_rtls_locating_manager__6gt2780-0da00_
siemenspp_telecontrol_server_basic_8_to_32_v3.1
siemensscalance_mum853-1__a1_
siemenssimotion_scout_tia_v5.4_sp1
siemenssimatic_rtls_locating_manager__6gt2780-1ea10_
siemenssimatic_s7-plcsim_v16
siemenspp_telecontrol_server_basic_64_to_256_v3.1
siemensst7_scadaconnect__6nh7997-5da10-0aa0_
siemenssinamics_startdrive
siemensmendix_runtime_v10.6
siemensruggedcom_rm1224_lte_4g__nam
siemenssimatic_wincc_v18
siemenssolid_edge_se2024
siemensscalance_s615_eec_lan-router
siemenssimatic_pcs_7_v9.1
siemenssimatic_net_pc_software_v19
siemenssinamics_startdrive_v16
siemenstelecontrol_server_basic_32_v3.1
siemenssimatic_wincc
siemenstotally_integrated_automation_portal__tia_portal__v17
siemenssimatic_s7-1500_tm_mfp_-_gnu_linux_subsystem
siemensruggedcom_rm1224_lte_4g__eu
siemenssimatic_rtls_locating_manager__6gt2780-1ea20_
siemensscalance_m874-3_3g-router__cn_
siemenssimatic_wincc_unified_v17
siemenstia_portal_cloud_v18
siemenssimocode_es_v18
siemenssimatic_step_7_v17
siemenstelecontrol_server_basic_serv_upgr
siemenssiplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_
siemenssinumerik_plc_programming_tool
siemenstelecontrol_server_basic_upgr_v3.1
siemenssimatic_mv500_family
siemensscalance_xcm324__6gk5324-8ts01-2ac2_
siemenssimatic_wincc_runtime_advanced
siemenssimatic_net_pc_software_v16
siemensscalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_
siemenssinamics_startdrive_v17
siemenssimatic_step_7_safety_v17
siemenssimatic_automation_tool
siemenstotally_integrated_automation_portal__tia_portal__v19
siemenssirius_safety_es_v17
siemenssimatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_
siemensscalance_xcm328__6gk5328-4ts01-2ac2_
siemenssimatic_s7
siemenssimatic_wincc_runtime_professional
siemensscalance_m876-3
siemenssimatic_pdm_v9.2
siemenssimatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_
siemenssimatic_rtls_locating_manager__6gt2780-0da10_
siemenssimocode_es_v16
siemenssimatic_wincc_v7.5
siemensmendix_runtime_v9
siemenssimatic_wincc_oa_v3.17
siemenssinec_ins
siemenstelecontrol_server_basic_64_v3.1
siemenstotally_integrated_automation_portal__tia_portal__v15.1
siemenstelecontrol_server_basic_v3
siemensozw672
siemenssinamics_startdrive_v18
siemensscalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_
siemensscalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_
siemenssimatic_net_pc_software_v17
siemenspp_telecontrol_server_basic_256_to_1000_v3.1
siemenssirius_safety_es_v18
siemensscalance_m804pb
siemenssinec_nms
siemenssimatic_wincc_runtime_professional_v19
siemenssimatic_wincc_unified_pc_runtime_v18
siemenssimotion_scout_tia_v5.4_sp3
siemenssimatic_step_7_v18
siemenssimatic_wincc_oa_v3.18
siemensscalance_m826-2_shdsl-router
siemensscalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_
siemensscalance_m876-3__rok_
siemenssimatic_wincc_v16
siemenstelecontrol_server_basic_8_v3.1
siemenssimatic_wincc_oa_v3.19
siemenssimatic_rtls_locating_manager__6gt2780-0da20_
siemensmendix_runtime_v10.12
siemenstia_portal_cloud_v17
siemenssirius_soft_starter_es_v18

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›