Siemens Opcenter Execution Foundation

CVE-2023-46283

HIGH 7.5

At a glance

Source: NVD
EPSS: EPSS 0.91 % · percentile 60 (2026-10-31)
State: PUBLISHED
Published: 2023-12-12 11:27 UTC
Updated: 2025-01-14 10:29 UTC
Assigner: siemens
NVD status: Modified

Search on…

Description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15.1 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer when handling specific requests on port 4002/tcp. This could allow an attacker to crash the application. The corresponding service is auto-restarted after the crash.

Weaknesses (CWE)

CWE-120 — Buffer Copy without Checking Size of Input

References

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C	siemens
CVSS 3.1	HIGH 7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD · productcert@siemens.com (Secondary)

European references

ENISA EUVD · EUVD-2023-50508
GCVE · GCVE-0-2023-46283

CERT-FR advisories

CERTFR-2023-AVI-1015 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:siemens:opcenter_quality:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:simatic_pcs_neo:*:*:*:*:*:*:*:* < 4.1
cpe:2.3:a:siemens:sinumerik_integrate_runmyhmi_\/automotive:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:* ≥ 14.0 < 15
cpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:* ≥ 15 < 16
cpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:* ≥ 16 < 17
cpe:2.3:a:siemens:totally_integrated_automation_portal:*:*:*:*:*:*:*:* ≥ 17 < 18
cpe:2.3:a:siemens:totally_integrated_automation_portal:-:*:*:*:*:*:*:*
cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:*
cpe:2.3:a:siemens:totally_integrated_automation_portal:18:update_1:*:*:*:*:*:*

Affected products

Product	Versions
Siemens · Opcenter Execution Foundation	affected 0 < V2407
Siemens · Opcenter Quality	affected 0 < V2312
Siemens · SIMATIC PCS neo	affected 0 < V4.1
Siemens · SINEC NMS	affected 0 < V2.0 SP1
Siemens · Totally Integrated Automation Portal (TIA Portal) V14	affected 0 < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V15.1	affected 0 < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V16	affected 0 < *
Siemens · Totally Integrated Automation Portal (TIA Portal) V17	affected 0 < V17 Update 8
Siemens · Totally Integrated Automation Portal (TIA Portal) V18	affected 0 < V18 Update 3

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Siemens Opcenter Execution Foundation