CVE-2024-49775 Memory corruption in Opcenter Execution Foundation

What is CVE-2024-49775?

CVE-2024-49775 is a critical memory corruption vulnerability in Siemens Opcenter Execution Foundation, published on 16 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions < V2512), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SINEC NMS (All versions if operated in conjunction with UMC < V2.15), Totally Integrated Automation Portal (TIA Portal) V16 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V18 (All versions), Totally Integrated Automation Portal (TIA Portal) V19 (All versions). Affected products contain a heap-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code.

Weakness: CWE-122

Which versions are affected by CVE-2024-49775?

How do I fix CVE-2024-49775?

No fix has been published for CVE-2024-49775 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2024-49775 being exploited?

There is no known exploitation of CVE-2024-49775 in the wild and no public exploit code.

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-qc35-5wrm-x6wx.