High severity · published Jul 9, 2024
CVE-2022-45147
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions < V18 Update 2). Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application.
This is the same issue that exists for .NET BinaryFormatter https://docs.microsoft.com/en-us/visualstudio/code-quality/ca2300.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
SIMATIC PCS neo V4.0 · Siemens
0 · source: vendor
SS
SIMATIC STEP 7 V16 · Siemens
0 · source: vendor
SS
SIMATIC STEP 7 V17 · Siemens
0 · source: vendor
SS
SIMATIC STEP 7 V18 · Siemens
before V18 Update 2 · source: vendor
SP
Simatic Pcs Neo · Siemens
4.0 before 5.0 · source: CISA
SS
Simatic Step 7 · Siemens
16 before 17; 17 before 18; 18 before 18_update_2; 16 before 17; 17 before 18; 18 before 18_update_2; +3 more · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-45147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-45147
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-825651.html
More from SIMATIC PCS neo V4.0
9.8
CVE-2024-49775
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions…
9.8
CVE-2024-33698
A vulnerability has been identified in Opcenter Quality (All versions < V2406), Opcenter RDnL (All versions < V2410), SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1…
8.8
CVE-2024-45386
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update…