CVE-2023-46283
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-46283 is a vulnerability that affects multiple Siemens products, including Opcenter Quality, SIMATIC PCS neo, SINEC NMS, SINUMERIK Integrate RunMyHMI/Automotive, and various versions of the Totally Integrated Automation Portal (TIA Portal). The vulnerability allows for an out-of-bounds write past the end of an allocated buffer when handling specific requests on port 4002/tcp. This can lead to a crash of the affected application. The service associated with the application is automatically restarted after the crash. The vulnerability has a base severity rating of HIGH and a base score of 7.5 according to CVSS:3.1 standards. It poses a potential danger to organizations as it can be exploited remotely without any user interaction, leading to a possible denial-of-service scenario. To remediate this vulnerability, organizations should apply the necessary updates or patches provided by Siemens for the affected products.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions