Low severity3.9NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026
CVE-2023-28829
CVE-2023-28829
Description
A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC WinCC (All versions < V8.0), SINAUT Software ST7sc (All versions). Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement state-of-the-art security mechanisms for authentication and encryption of contents.
Affected products
18cpe:2.3:a:siemens:simatic_net_pc_software:14.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:siemens:simatic_net_pc_software:14.0:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_net_pc_software:15.0:*:*:*:*:*:*:*
- (no CPE)range: V14, V15
- (no CPE)range: All versions
- (no CPE)range: All versions
cpe:2.3:a:siemens:simatic_pcs_7:8.2:-:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:siemens:simatic_pcs_7:8.2:-:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_pcs_7:9.0:-:*:*:*:*:*:*
- cpe:2.3:a:siemens:simatic_pcs_7:9.1:-:*:*:*:*:*:*
- (no CPE)range: V8.2, V9.0, V9.1
- (no CPE)range: All versions
- (no CPE)range: All versions
- (no CPE)range: All versions
cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*range: <8.0
- (no CPE)range: All versions < V8.0
- cpe:2.3:a:siemens:sinaut_st7sc:*:*:*:*:*:*:*:*
All versions+ 1 more
- (no CPE)range: All versions
- (no CPE)range: All versions
- Range: < V8.0
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/pdf/ssa-508677.pdfnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.