VDB
GCVE-110-NCSC-2024-433
GCVE-110-NCSC-2024-433
Advisory PublishedCVSS 7.8/10
Improper Authentication
Weaknesses (CWE)
CWE-125Out-of-bounds ReadCWE-287Improper AuthenticationCWE-20Improper Input ValidationCWE-404Improper Resource Shutdown or ReleaseCWE-617Reachable AssertionCWE-400Uncontrolled Resource ConsumptionCWE-325Missing Cryptographic StepCWE-754Improper Check for Unusual or Exceptional ConditionsCWE-328Use of Weak HashCWE-770Allocation of Resources Without Limits or ThrottlingCWE-122Heap-based Buffer OverflowCWE-275-CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-502Deserialization of Untrusted DataCWE-354Improper Validation of Integrity Check ValueCWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')CWE-94Improper Control of Generation of Code ('Code Injection')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-201Insertion of Sensitive Information Into Sent DataCWE-311Missing Encryption of Sensitive DataCWE-208Observable Timing DiscrepancyCWE-222Truncation of Security-relevant InformationCWE-190Integer Overflow or WraparoundCWE-121Stack-based Buffer OverflowCWE-416Use After FreeCWE-476NULL Pointer DereferenceCWE-319Cleartext Transmission of Sensitive InformationCWE-295Improper Certificate ValidationCWE-772Missing Release of Resource after Effective LifetimeCWE-606Unchecked Input for Loop ConditionCWE-271Privilege Dropping / Lowering ErrorsCWE-942Permissive Cross-domain Policy with Untrusted DomainsCWE-918Server-Side Request Forgery (SSRF)CWE-310-CWE-284Improper Access ControlCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-266Incorrect Privilege AssignmentCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-321Use of Hard-coded Cryptographic KeyCWE-613Insufficient Session ExpirationCWE-732Incorrect Permission Assignment for Critical ResourceCWE-427Uncontrolled Search Path ElementCWE-863Incorrect AuthorizationCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Risk Scores
CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| siemens | tia_portal_cloud_connector | — | — |
| siemens | telecontrol_server_basic_256_v3.1 | — | — |
| siemens | simatic_net_pc_software_v18 | — | — |
| siemens | simatic_wincc_runtime_professional_v17 | — | — |
| siemens | mendix_runtime_v8 | — | — |
| siemens | siport | — | — |
| siemens | scalance_m876-4__nam_ | — | — |
| siemens | s7-pct | — | — |
| siemens | simatic_net_pc_software | — | — |
| siemens | simatic_step_7_v16 | — | — |
| siemens | scalance_m876-4__eu_ | — | — |
| siemens | scalance_m816-1_adsl-router | — | — |
| siemens | simatic_wincc_unified_v16 | — | — |
| siemens | scalance_mum856-1__row_ | — | — |
| siemens | scalance_mum853-1__eu_ | — | — |
| siemens | scalance_xcm332__6gk5332-0ga01-2ac2_ | — | — |
| siemens | sirius_soft_starter_es_v17 | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-0da30_ | — | — |
| siemens | scalance_mum856-1__b1_ | — | — |
| siemens | scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_ | — | — |
| siemens | totally_integrated_automation_portal | — | — |
| siemens | ruggedcom_ape1808 | — | — |
| siemens | scalance_mum856-1__cn_ | — | — |
| siemens | security_configuration_tool__sct_ | — | — |
| siemens | simatic_wincc_v7.4 | — | — |
| siemens | simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ | — | — |
| siemens | simatic_s7-plcsim_v17 | — | — |
| siemens | pp_telecontrol_server_basic_1000_to_5000_v3.1 | — | — |
| siemens | scalance_xch328__6gk5328-4ts01-2ec2_ | — | — |
| siemens | scalance_m812-1_adsl-router | — | — |
| siemens | scalance_m874-2 | — | — |
| siemens | sinumerik_one_virtual | — | — |
| siemens | simatic_wincc_v17 | — | — |
| siemens | simatic_step_7_safety_v18 | — | — |
| siemens | scalance_mum856-1__a1_ | — | — |
| siemens | simatic_route_control_v9.1 | — | — |
| siemens | mendix_runtime_v10 | — | — |
| siemens | simatic_wincc_runtime_professional_v18 | — | — |
| siemens | simatic_wincc_unified_v18 | — | — |
| siemens | scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_ | — | — |
| siemens | scalance_s615_lan-router | — | — |
| siemens | pp_telecontrol_server_basic_32_to_64_v3.1 | — | — |
| siemens | spectrum_power_7 | — | — |
| siemens | scalance_mum853-1__b1_ | — | — |
| siemens | simatic_wincc_unified_pc_runtime | — | — |
| siemens | simotion_scout_tia_v5.5_sp1 | — | — |
| siemens | simatic_cp_1543-1_v4.0 | — | — |
| siemens | totally_integrated_automation_portal__tia_portal__v18 | — | — |
| siemens | simatic_batch_v9.1 | — | — |
| siemens | simatic_wincc_v8.0 | — | — |
| siemens | scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_ | — | — |
| siemens | sinema_remote_connect_client | — | — |
| siemens | ozw772 | — | — |
| siemens | scalance_mum856-1__eu_ | — | — |
| siemens | simatic_step_7_safety_v16 | — | — |
| siemens | scalance_m874-3 | — | — |
| siemens | simatic_step_7_v5 | — | — |
| siemens | simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ | — | — |
| siemens | tia_portal_cloud_v16 | — | — |
| siemens | scalance_m876-4 | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-1ea30_ | — | — |
| siemens | simocode_es_v17 | — | — |
| siemens | telecontrol_server_basic_5000_v3.1 | — | — |
| siemens | telecontrol_server_basic_1000_v3.1 | — | — |
| siemens | totally_integrated_automation_portal__tia_portal__v16 | — | — |
| siemens | simatic_wincc_runtime_professional_v16 | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-0da00_ | — | — |
| siemens | pp_telecontrol_server_basic_8_to_32_v3.1 | — | — |
| siemens | scalance_mum853-1__a1_ | — | — |
| siemens | simotion_scout_tia_v5.4_sp1 | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-1ea10_ | — | — |
| siemens | simatic_s7-plcsim_v16 | — | — |
| siemens | pp_telecontrol_server_basic_64_to_256_v3.1 | — | — |
| siemens | st7_scadaconnect__6nh7997-5da10-0aa0_ | — | — |
| siemens | sinamics_startdrive | — | — |
| siemens | mendix_runtime_v10.6 | — | — |
| siemens | ruggedcom_rm1224_lte_4g__nam | — | — |
| siemens | simatic_wincc_v18 | — | — |
| siemens | solid_edge_se2024 | — | — |
| siemens | scalance_s615_eec_lan-router | — | — |
| siemens | simatic_pcs_7_v9.1 | — | — |
| siemens | simatic_net_pc_software_v19 | — | — |
| siemens | sinamics_startdrive_v16 | — | — |
| siemens | telecontrol_server_basic_32_v3.1 | — | — |
| siemens | simatic_wincc | — | — |
| siemens | totally_integrated_automation_portal__tia_portal__v17 | — | — |
| siemens | simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem | — | — |
| siemens | ruggedcom_rm1224_lte_4g__eu | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-1ea20_ | — | — |
| siemens | scalance_m874-3_3g-router__cn_ | — | — |
| siemens | simatic_wincc_unified_v17 | — | — |
| siemens | tia_portal_cloud_v18 | — | — |
| siemens | simocode_es_v18 | — | — |
| siemens | simatic_step_7_v17 | — | — |
| siemens | telecontrol_server_basic_serv_upgr | — | — |
| siemens | siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ | — | — |
| siemens | sinumerik_plc_programming_tool | — | — |
| siemens | telecontrol_server_basic_upgr_v3.1 | — | — |
| siemens | simatic_mv500_family | — | — |
| siemens | scalance_xcm324__6gk5324-8ts01-2ac2_ | — | — |
| siemens | simatic_wincc_runtime_advanced | — | — |
| siemens | simatic_net_pc_software_v16 | — | — |
| siemens | scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_ | — | — |
| siemens | sinamics_startdrive_v17 | — | — |
| siemens | simatic_step_7_safety_v17 | — | — |
| siemens | simatic_automation_tool | — | — |
| siemens | totally_integrated_automation_portal__tia_portal__v19 | — | — |
| siemens | sirius_safety_es_v17 | — | — |
| siemens | simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ | — | — |
| siemens | scalance_xcm328__6gk5328-4ts01-2ac2_ | — | — |
| siemens | simatic_s7 | — | — |
| siemens | simatic_wincc_runtime_professional | — | — |
| siemens | scalance_m876-3 | — | — |
| siemens | simatic_pdm_v9.2 | — | — |
| siemens | simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-0da10_ | — | — |
| siemens | simocode_es_v16 | — | — |
| siemens | simatic_wincc_v7.5 | — | — |
| siemens | mendix_runtime_v9 | — | — |
| siemens | simatic_wincc_oa_v3.17 | — | — |
| siemens | sinec_ins | — | — |
| siemens | telecontrol_server_basic_64_v3.1 | — | — |
| siemens | totally_integrated_automation_portal__tia_portal__v15.1 | — | — |
| siemens | telecontrol_server_basic_v3 | — | — |
| siemens | ozw672 | — | — |
| siemens | sinamics_startdrive_v18 | — | — |
| siemens | scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_ | — | — |
| siemens | scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_ | — | — |
| siemens | simatic_net_pc_software_v17 | — | — |
| siemens | pp_telecontrol_server_basic_256_to_1000_v3.1 | — | — |
| siemens | sirius_safety_es_v18 | — | — |
| siemens | scalance_m804pb | — | — |
| siemens | sinec_nms | — | — |
| siemens | simatic_wincc_runtime_professional_v19 | — | — |
| siemens | simatic_wincc_unified_pc_runtime_v18 | — | — |
| siemens | simotion_scout_tia_v5.4_sp3 | — | — |
| siemens | simatic_step_7_v18 | — | — |
| siemens | simatic_wincc_oa_v3.18 | — | — |
| siemens | scalance_m826-2_shdsl-router | — | — |
| siemens | scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_ | — | — |
| siemens | scalance_m876-3__rok_ | — | — |
| siemens | simatic_wincc_v16 | — | — |
| siemens | telecontrol_server_basic_8_v3.1 | — | — |
| siemens | simatic_wincc_oa_v3.19 | — | — |
| siemens | simatic_rtls_locating_manager__6gt2780-0da20_ | — | — |
| siemens | mendix_runtime_v10.12 | — | — |
| siemens | tia_portal_cloud_v17 | — | — |
| siemens | sirius_soft_starter_es_v18 | — | — |
Aliases
CVE-2021-3506CVE-2023-28450CVE-2023-2975CVE-2023-30584CVE-2023-32002CVE-2023-32003CVE-2023-32004CVE-2023-32005CVE-2023-32006CVE-2023-32558CVE-2023-32559CVE-2023-32736CVE-2023-3341CVE-2023-3446CVE-2023-3817CVE-2023-38552CVE-2023-38709CVE-2023-39331CVE-2023-39332CVE-2023-39333CVE-2023-4236CVE-2023-4408CVE-2023-44487CVE-2023-45143CVE-2023-46218CVE-2023-46219CVE-2023-46280CVE-2023-46809CVE-2023-47038CVE-2023-47039CVE-2023-47100CVE-2023-4807CVE-2023-48795CVE-2023-49441CVE-2023-50387CVE-2023-50868CVE-2023-52389CVE-2023-5363CVE-2023-5517CVE-2023-5678CVE-2023-5679CVE-2023-5680CVE-2023-6129CVE-2023-6237CVE-2023-6516CVE-2023-7104CVE-2024-0232CVE-2024-0727CVE-2024-2004CVE-2024-21890CVE-2024-21891CVE-2024-21892CVE-2024-21896CVE-2024-22017CVE-2024-22019CVE-2024-22025CVE-2024-2379CVE-2024-2398CVE-2024-2466CVE-2024-24758CVE-2024-24795CVE-2024-24806CVE-2024-2511CVE-2024-26306CVE-2024-26925CVE-2024-27316CVE-2024-27980CVE-2024-27982CVE-2024-27983CVE-2024-28882CVE-2024-29119CVE-2024-36140CVE-2024-44102CVE-2024-4603CVE-2024-46888CVE-2024-46889CVE-2024-46890CVE-2024-46891CVE-2024-46892CVE-2024-46894CVE-2024-4741CVE-2024-47783CVE-2024-47808CVE-2024-47940CVE-2024-47941CVE-2024-47942CVE-2024-50310CVE-2024-50313CVE-2024-50557CVE-2024-50558CVE-2024-50559CVE-2024-50560CVE-2024-50561CVE-2024-50572CVE-2024-5535CVE-2024-5594
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.