CVE-2022-24287 Security feature bypass in SIMATIC PCS 7 V8.2
An authenticated attacker can escape WinCC Kiosk Mode due to missing printer configuration, potentially gaining unauthorized access to the underlying system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-24287?
CVE-2022-24287 is a high-severity vulnerability in Siemens SIMATIC PCS 7 V8.2, published on 10 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and earlier (All versions), SIMATIC WinCC Runtime Professional V17 (All versions < V17 Upd4), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 21), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 8). A missing printer configuration on the host could allow an authenticated attacker to escape the WinCC Kiosk Mode.
Weakness: CWE-1188
Which versions are affected by CVE-2022-24287?
It affects 3 products.
Products include Siemens Simatic Pcs 7, Siemens Simatic Wincc, Siemens Simatic Wincc Runtime Professional.
How do I fix CVE-2022-24287?
No fix has been published for CVE-2022-24287 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-24287 being exploited?
There is no known exploitation of CVE-2022-24287 in the wild and no public exploit code.
Other vulnerabilities in Siemens SIMATIC PCS 7 V8.2
Sources
Also known as GHSA-8h6x-wrc8-g9xc.