CVE-2023-46284

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 55.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Siemens Opcenter Execution FoundationSiemens Opcenter QualitySiemens Simatic PCS NEO+7 more
Timeline
PublishedDec 12

Description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Upda…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages11 packages

Patches

Patch: cert-portal.siemens.com ↗Patch: cert-portal.siemens.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2023-46284: A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo↗2023-12-12
▶
GHSA
GHSA-f2hj-x395-x532: A vulnerability has been identified in Opcenter Quality (All versions), SIMATIC PCS neo (All versions < V4↗2023-12-12
▶
CVE-2023-46284 (HIGH CVSS 7.5) | A vulnerability has been identified | cvebase.io