Vulnetix
Try Vulnetix Request Demo
SSA-039007 PUBLISHED CVSS 9.800000190734863 CRITICAL

Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Opcenter Quality
SIMATIC PCS neo V4.1
SIMATIC PCS neo V5.0
SIMATIC PCS neo V4.0
Totally Integrated Automation Portal (TIA Portal) V19
SINEMA Remote Connect Client
Totally Integrated Automation Portal (TIA Portal) V18
SINEC NMS
Totally Integrated Automation Portal (TIA Portal) V16
Totally Integrated Automation Portal (TIA Portal) V17
Opcenter RDnL

Timeline

References

Open in Interactive Console →