CVE-2023-48364 Null dereference in OpenPCS 7 V9.1
Attackers can cause denial of service in Siemens SCADA systems by sending malformed RPC messages due to improper handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-48364?
CVE-2023-48364 is a high-severity vulnerability in Siemens OpenPCS 7 V9.1, published on 13 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 4), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 15), SIMATIC WinCC V8.0 (All versions < V8.0 Update 4). The implementation of the RPC (Remote Procedure call) communication protocol in the affected products do not properly handle certain malformed RPC messages. An attacker could use this vulnerability to cause a denial of service condition in the RPC server.
Weakness: CWE-476
Which versions are affected by CVE-2023-48364?
It affects 6 products.
Products include Siemens Openpcs 7, Siemens Simatic Batch, Siemens Simatic Pcs 7, Siemens Simatic Route Control, Siemens Simatic Wincc, Siemens Simatic Wincc Runtime Professional.
How do I fix CVE-2023-48364?
No fix has been published for CVE-2023-48364 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-48364 being exploited?
There is no known exploitation of CVE-2023-48364 in the wild and no public exploit code.
Other vulnerabilities in Siemens OpenPCS 7 V9.1
Sources
Also known as GHSA-m3wg-jr4x-9483.