CVE-2023-32736

Summary

CVE-2023-32736 is a vulnerability that affects multiple Siemens automation software products, including SIMATIC S7-PLCSIM, STEP 7 Safety, WinCC, SIMOCODE ES, SIMOTION SCOUT TIA, and TIA Portal Cloud. The issue lies in the improper input sanitization when parsing user settings. An attacker can exploit this type confusion vulnerability to execute arbitrary code within the affected application. Products with versions prior to V16 Update 8, V17 Update 8, V18 Update 5, and V4.6.0.1 for TIA Portal Cloud are vulnerable. Users are advised to upgrade to the latest secure versions as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.