CVE-2023-48363
Assigner: siemens
Published: 2024-02-13T08:59:55.432Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in OpenPCS 7 V9.1 (All versions), SIMATIC BATCH V9.1 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Route Control V9.1 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 SP4). The implementation of the RPC (Remote Procedure call) 
communication protocol in the affected products do not 
properly handle certain unorganized RPC messages. An 
attacker could use this vulnerability to cause a denial of service 
condition in the RPC server.
affected: vendor: Siemens
product: OpenPCS 7 V9.1
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC BATCH V9.1
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC PCS 7 V9.1
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC Route Control V9.1
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC WinCC Runtime Professional V18
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC WinCC Runtime Professional V19
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC WinCC V7.4
versions: status: affected
version: 0
lessThan: *
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC WinCC V7.5
versions: status: affected
version: 0
lessThan: V7.5 SP2 Update 15
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: SIMATIC WinCC V8.0
versions: status: affected
version: 0
lessThan: V8.0 SP4
versionType: custom
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
baseScore: 6.5
baseSeverity: MEDIUM
problemTypes: descriptions: cweId: CWE-476
description: CWE-476: NULL Pointer Dereference
type: CWE