Use of Obsolete Function in Siemens SIMATIC WinCC, SIMATIC NET PC, SIMATIC PCS and SINAUT Software ST7sc

1) Use of Obsolete Function

EUVDB-ID: #VU77319

Risk: Low

CVSSv3.1: 3.4 [CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-28829

CWE-ID: CWE-477 - Use of Obsolete Function

Exploit availability: No

Description

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to due to use of obsolete function. A remote administrator on the local network can bypass authentication process on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

SIMATIC NET PC Software: 14 - 15

SIMATIC PCS 7: 8.2 - 9.1

SINAUT Software ST7sc: All versions

Siemens SIMATIC WinCC: before 8.0

CPE2.3

• cpe:2.3:a:siemens:simatic_net_pc_software:14:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:simatic_net_pc_software:15:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:simatic_pcs_7:8.2:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:simatic_pcs_7:9.0:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:sinaut_software_st7sc:*:*:*:*:*:*:*:*
• cpe:2.3:a:siemens:siemens_simatic_wincc:*:*:*:*:*:*:*:*

External links

http://cert-portal.siemens.com/productcert/pdf/ssa-508677.pdf

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.