VDB

GCVE-110-NCSC-2024-473

GCVE-110-NCSC-2024-473
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published December 10, 2024
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.

Weaknesses (CWE)

CWE-352Cross-Site Request Forgery (CSRF)CWE-821Incorrect SynchronizationCWE-122Heap-based Buffer OverflowCWE-125Out-of-bounds ReadCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-787Out-of-bounds WriteCWE-476NULL Pointer DereferenceCWE-611Improper Restriction of XML External Entity ReferenceCWE-502Deserialization of Untrusted DataCWE-20Improper Input ValidationCWE-416Use After FreeCWE-121Stack-based Buffer OverflowCWE-522Insufficiently Protected CredentialsCWE-191Integer Underflow (Wrap or Wraparound)

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
siemenssinamics_startdrive_v19
siemenssimatic_wincc_unified_v19
siemenscomos
siemenssentron_powercenter_1000__7kn1110-0mc00_
siemenssimatic_step_7_v16
siemenssimatic_wincc_unified_v16
siemenssimcenter_nastran_2306
siemenssimcenter_femap_v2306
siemenssirius_safety_es
siemensruggedcom_rox_rx1510
siemenstia_portal_cloud_v19
siemenssirius_safety_es_v18__tia_portal_
siemenssirius_safety_es_v17__tia_portal_
siemensruggedcom_rox_rx1511
siemenstecnomatix_plant_simulation
siemensruggedcom_rox_rx1524
siemenssimatic_s7-plcsim_v17
siemensruggedcom_rox_rx1400
siemenssirius_soft_starter_es_v18__tia_portal_
siemensruggedcom_rox_rx5000
siemenssimatic_wincc_v17
siemenssimatic_step_7_safety_v18
siemensruggedcom_rox_mx5000re
siemenssentron_powercenter_1100__7kn1111-0mc00_
siemenssimatic_wincc_unified_v18
siemenssimcenter_femap_v2406
siemenssimatic_s7-plcsim_v18
siemensteamcenter_visualization
siemenstecnomatix_plant_simulation_v2302
siemensruggedcom_rox_rx1536
siemenssimotion_scout_tia_v5.5_sp1
siemenssimatic_step_7_safety_v16
siemenstia_portal_cloud_v16
siemenssimotion_scout_tia_v5.6_sp1
siemenssimocode_es_v17
siemenssimatic_wincc_v19
siemenstecnomatix_plant_simulation_v2404
siemenssirius_soft_starter_es_v19__tia_portal_
siemensruggedcom_rox_rx1512
siemenssimotion_scout_tia_v5.4_sp1
siemenssimatic_s7-plcsim_v16
siemenssinamics_startdrive
siemenssimatic_wincc_v18
siemenssolid_edge_se2024
siemensteamcenter_visualization_v2312
siemenscomos_v10.4.4
siemensruggedcom_rox_mx5000
siemenscomos_v10.4.4.1
siemenssinamics_startdrive_v16
siemenscpci85_central_processing_communication
siemenssimcenter_femap_v2401
siemenssimatic_wincc
siemensteamcenter_visualization_v2406
siemenscomos_v10.4.0
siemenssimatic_wincc_unified_v17
siemenstia_portal_cloud_v18
siemenssimocode_es_v18
siemenssimatic_step_7_v17
siemenssirius_soft_starter_es_v17__tia_portal_
siemenssirius_safety_es_v19__tia_portal_
siemenssimatic_wincc_unified
siemenssimocode_es_v19
siemenscomos_v10.4.1
siemenscomos_v10.4.3
siemenssinamics_startdrive_v17
siemenssimatic_step_7_safety_v19
siemensteamcenter_visualization_v14.3
siemenssimatic_step_7_safety_v17
siemenssimatic_step_7_v19
siemenssimocode_es_v16
siemensteamcenter_visualization_v14.2
siemensruggedcom_rox_rx1501
siemenssimcenter_nastran_2312
siemenssinamics_startdrive_v18
siemenscomos_v10.3
siemenssimcenter_nastran
siemenstia_portal_cloud
siemenssimatic_wincc_unified_pc_runtime_v18
siemenssimotion_scout_tia_v5.4_sp3
siemenssimatic_step_7_v18
siemensruggedcom_rox_rx1500
siemenssimatic_wincc_v16
siemenssimcenter_nastran_2406
siemenscomos_v10.4.2
siemenssimatic_wincc_unified_pc_runtime_v19
siemenssimatic_step_7
siemenstia_portal_cloud_v17

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,496 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›