CVE-2023-28829 Security feature bypass in SIMATIC NET PC Software V14
Legacy OPC services in Siemens SCADA software lack modern authentication and encryption, allowing attackers to bypass security controls.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-28829?
CVE-2023-28829 is a low-severity vulnerability in Siemens SIMATIC NET PC Software V14, published on 13 Jun 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.
Weakness: CWE-477
Which versions are affected by CVE-2023-28829?
It affects 4 products.
Products include Siemens Simatic Net Pc Software, Siemens Simatic Pcs 7, Siemens Simatic Wincc, Siemens Sinaut St7sc.
How do I fix CVE-2023-28829?
No fix has been published for CVE-2023-28829 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-28829 being exploited?
There is no known exploitation of CVE-2023-28829 in the wild and no public exploit code.
Sources
Also known as GHSA-cgxq-vv5m-p85q.