github - ghsa-h5rg-jpqm-g43g

ghsa-h5rg-jpqm-g43g

Vulnerability from github

Published

2024-09-10 12:30

Modified

2024-09-10 12:30

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
9.4 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Details

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

Show details on source website

JSON

To clipboard

{
   affected: [],
   aliases: [
      "CVE-2024-35783",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-250",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-09-10T10:15:09Z",
      severity: "CRITICAL",
   },
   details: "A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.",
   id: "GHSA-h5rg-jpqm-g43g",
   modified: "2024-09-10T12:30:37Z",
   published: "2024-09-10T12:30:37Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-35783",
      },
      {
         type: "WEB",
         url: "https://cert-portal.siemens.com/productcert/html/ssa-629254.html",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
      {
         score: "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
         type: "CVSS_V4",
      },
   ],
}

cve-2024-35783

Vulnerability from cvelistv5

Published

2024-09-10 09:36

Modified

2025-01-14 10:30

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
9.4 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Summary

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/html/ssa-629254.html

Impacted products

Vendor

Product

Version

▼

Siemens

SIMATIC BATCH V9.1

Version: 0 < *

Siemens	SIMATIC Information Server 2020	Version: 0 < V2020 SP2 Update 5
Siemens	SIMATIC Information Server 2022	Version: 0 < V2022 SP1 Update 2
Siemens	SIMATIC PCS 7 V9.1	Version: 0 < V9.1 SP2 UC06
Siemens	SIMATIC Process Historian 2020	Version: 0 < V2020 SP2 Update 5
Siemens	SIMATIC Process Historian 2022	Version: 0 < V2022 SP1 Update 2
Siemens	SIMATIC WinCC Runtime Professional V18	Version: 0 < V18 Update 5
Siemens	SIMATIC WinCC Runtime Professional V19	Version: 0 < V19 Update 3
Siemens	SIMATIC WinCC V7.4	Version: 0 < *
Siemens	SIMATIC WinCC V7.5	Version: 0 < V7.5 SP2 Update 18
Siemens	SIMATIC WinCC V8.0	Version: 0 < V8.0 Update 5

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:siemens:simatic_wincc_runtime_professional:18:*:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_wincc_runtime_professional:19:*:*:*:*:*:*:*",
                     "cpe:2.3:h:siemens:simatic_process_historian:2020:-:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_process_historian:2022:*:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_pcs7:*:*:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_information_server:2020:-:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_information_server:2022:*:*:*:*:*:*:*",
                     "cpe:2.3:a:siemens:simatic_batch:9.1:-:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "simatic_batch",
                  vendor: "siemens",
                  versions: [
                     {
                        lessThan: "*",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
               {
                  cpes: [
                     "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "simatic_wincc",
                  vendor: "siemens",
                  versions: [
                     {
                        lessThan: "7.5_sp2_update_18",
                        status: "affected",
                        version: "7.4",
                        versionType: "custom",
                     },
                     {
                        lessThan: "8.0_update_5",
                        status: "affected",
                        version: "8.0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-35783",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-10T15:12:46.700884Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-10T17:31:08.389Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "SIMATIC BATCH V9.1",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "*",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC Information Server 2020",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V2020 SP2 Update 5",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC Information Server 2022",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V2022 SP1 Update 2",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC PCS 7 V9.1",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V9.1 SP2 UC06",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC Process Historian 2020",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V2020 SP2 Update 5",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC Process Historian 2022",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V2022 SP1 Update 2",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC WinCC Runtime Professional V18",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V18 Update 5",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC WinCC Runtime Professional V19",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V19 Update 3",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC WinCC V7.4",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "*",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC WinCC V7.5",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V7.5 SP2 Update 18",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
            {
               defaultStatus: "unknown",
               product: "SIMATIC WinCC V8.0",
               vendor: "Siemens",
               versions: [
                  {
                     lessThan: "V8.0 Update 5",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions < V2020 SP2 Update 5), SIMATIC Information Server 2022 (All versions < V2022 SP1 Update 2), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC06), SIMATIC Process Historian 2020 (All versions < V2020 SP2 Update 5), SIMATIC Process Historian 2022 (All versions < V2022 SP1 Update 2), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 3), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 18), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products run their DB server with elevated privileges which could allow an authenticated attacker to execute arbitrary OS commands with administrative privileges.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  baseScore: 9.1,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
            },
            {
               cvssV4_0: {
                  baseScore: 9.4,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
                  version: "4.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-250",
                     description: "CWE-250: Execution with Unnecessary Privileges",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-14T10:30:01.253Z",
            orgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
            shortName: "siemens",
         },
         references: [
            {
               url: "https://cert-portal.siemens.com/productcert/html/ssa-629254.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
      assignerShortName: "siemens",
      cveId: "CVE-2024-35783",
      datePublished: "2024-09-10T09:36:32.225Z",
      dateReserved: "2024-05-17T11:07:53.264Z",
      dateUpdated: "2025-01-14T10:30:01.253Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted