Authentication Bypass by Primary Weakness in Siemens products - CVE-2024-42513

Vulnerability identifier: #VU105635

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-42513

CWE-ID: CWE-305

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to insufficient access control in the OPC UA .NET Standard Stack. A remote attacker can bypass application authentication when using HTTPS endpoints.

SINUMERIK Edge
SIMATIC IPC DiagMonitor
SIMATIC WinCC Unified
SIMATIC BRAUMAT
SIMATIC Energy Manager PRO
SIMATIC SISTAR
Totally Integrated Automation Portal (TIA Portal)
SIMATIC WinCC

Install updates from vendor's website.

SIMATIC BRAUMAT - update to 8.1
SIMATIC Energy Manager PRO - update to 7.5 Update 2
SIMATIC SISTAR - update to 8.1
Totally Integrated Automation Portal (TIA Portal) - update to 19 Update 4
SIMATIC WinCC - update to 8.0 Update 3
SIMATIC WinCC Unified - update to 19 Update 4

• https://cert-portal.siemens.com/productcert/txt/ssa-858251.txt

• Multiple vulnerabilities in Siemens OPC UA