CVE-2024-33698

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions), SINEMA Remote Connect Client (All versions < V3.2 SP3), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions < V17 Update 8), Totally Integrated Automation Portal (TIA Portal) V18 (All versions < V18 Update 5), Totally Integrated Automation Portal (TIA Portal) V19 (All versions < V19 Update 3). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Vendor	Product	Versions
Siemens	Opcenter Quality	< V2406
Siemens	Opcenter RDnL	< V2410
Siemens	SIMATIC PCS neo V4.0	< *
Siemens	SIMATIC PCS neo V4.1	< V4.1 Update 2
Siemens	SIMATIC PCS neo V5.0	< V5.0 Update 1
Siemens	SINEC NMS	< *
Siemens	SINEMA Remote Connect Client	< V3.2 SP3
Siemens	Totally Integrated Automation Portal (TIA Portal) V16	< *
Siemens	Totally Integrated Automation Portal (TIA Portal) V17	< V17 Update 8
Siemens	Totally Integrated Automation Portal (TIA Portal) V18	< V18 Update 5
Siemens	Totally Integrated Automation Portal (TIA Portal) V19	< V19 Update 3
siemens	simatic_pcs_neo	>= 4.0, < 4.1_update_2
siemens	simatic_information_server	< *
siemens	totally_integrated_automation_portal	>= 17, < 17_update_8

References

https://cert-portal.siemens.com/productcert/html/ssa-039007.html

Timeline

Published: Sep 10, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-336998.8The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the adminis CVE-2024-33708.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template all CVE-2024-337007.5The LevelOne WBR-6012 router firmware R0.40e6 suffers from an input validation vulnerability within its FTP functionality, enabling attacker CVE-2024-33716.8MongoDB Compass may accept and use insufficiently validated input from an untrusted external source. This may cause unintended application b CVE-2024-33727.5Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authenticat CVE-2024-337226.3SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].CVE-2024-337245.4SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.CVE-2024-33739.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RSM Design Website Template allows SQL CVE-2024-33745.3An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BS CVE-2024-337484.1Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.CVE-2024-337499.1DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.CVE-2024-33759.4Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Co